Re: Permission denied when checking out from kerberos client

[Mark D. Baushke]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Nick,

If you are trying to specify a local username of nick.wales, then you
may need to patch your cvs sources to properly handle this.

There is a patch here: http://savannah.nongnu.org/bugs/?17083
for both cvs 1.11.x and cvs 1.12.x which may be able to help you
upgrade your client and server versions of CVS to do what you want.

At present, the nick.wales part is not being used at all and so you are
stuck with just a cvs/cvs2 as the name it is trying to validate.

In addition, the lack of being able to find a KDC for the realm suggests
that there may be a problem on cvs2 with locating the KDC realm. You may
need to use a fully qualified domain name for cvs2. It appears to be
using the loopback address and unless you are using a host which is
running its own KDC, that will not lead to good things.

        Good luck,
        -- Mark

Nick Wales <address@hidden> writes:

> Still having issues with this...
> 
> Now trying to run the gserver command from the local machine and getting 
> a more obvious error.
> 
> This is from the client end.... the KDC is definitely available, as I 
> have just got a kerberos ticket using kinit. klist shows that the ticket 
> is valid.
> > address@hidden gservertest]$ cvs -d 
> > :gserver:address@hidden:/var/cvs checkout test
> > cvs checkout: GSSAPI authentication failed: Unspecified GSS failure.  
> > Minor code may provide more information
> > cvs [checkout aborted]: GSSAPI authentication failed: Cannot find KDC 
> > for requested realm
> 
> The syslog shows this error.....
> > May 16 17:06:22 cvs xinetd[3251]: START: cvspserver pid=4051 
> > from=127.0.0.1
> > May 16 17:06:22 cvs xinetd[3251]: EXIT: cvspserver signal=13 pid=4051 
> > duration=0(sec)
> 
> 
> Any ideas?
> 
> Nick
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQFGWG7ZCg7APGsDnFERAkrVAJ9hZtSPtKMpRQL4+RzUDIsEysVWDQCeJ/mM
M5Url6vSlJHV6CRANRNG+WU=
=XG/A
-----END PGP SIGNATURE-----