{"id":3515,"date":"2018-02-04T03:00:43","date_gmt":"2018-02-04T08:00:43","guid":{"rendered":"http:\/\/microdevsys.com\/wp\/?p=3515"},"modified":"2019-09-22T16:53:21","modified_gmt":"2019-09-22T20:53:21","slug":"kinit-cannot-find-kdc-for-realm-while-getting-initial-credentials","status":"publish","type":"post","link":"https:\/\/microdevsys.com\/wp\/kinit-cannot-find-kdc-for-realm-while-getting-initial-credentials\/","title":{"rendered":"kinit: Cannot find KDC for realm  while getting initial credentials"},"content":{"rendered":"<p>\n\tProblem is that you need&nbsp;\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">dns_lookup_kdc = true<\/span>\n<\/p>\n<p style=\"margin-left: 40px;\">\n\tin your <span style=\"font-family:courier new,courier,monospace;\">\/etc\/krb5.conf<\/span> under the&nbsp;<span style=\"font-family:courier new,courier,monospace;\">[libdefaults]<\/span> section file:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">[root@mysql01 ~]# kinit tom@mds.xyz<br \/>\n\tkinit: Cannot find KDC for realm &quot;mds.xyz&quot; while getting initial credentials<br \/>\n\t[root@mysql01 ~]#<br \/>\n\t[root@mysql01 ~]# vi \/etc\/krb5.conf<br \/>\n\t[root@mysql01 ~]# systemctl restart sssd<br \/>\n\t[root@mysql01 ~]# kinit tom@mds.xyz<br \/>\n\tPassword for tom@mds.xyz:<br \/>\n\t[root@mysql01 ~]#<\/span>\n<\/p>\n<p>\n\tThe other source of this error is that you&#39;re really missing the realm:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\">Sep 22 16:45:45 mdskvm-p01 [sssd[krb5_child[16698]]]: Cannot find KDC for realm &quot;MDS.XYZ&quot;<\/span>\n<\/p>\n<p>\n\tso to solve it add this block:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"color:#008000;\"><span style=\"font-family:courier new,courier,monospace;\">&nbsp; [realms]<br \/>\n\t&nbsp; MDS.XYZ = {<br \/>\n\t&nbsp; &nbsp; kdc = ad.mds.xyz<br \/>\n\t&nbsp; &nbsp; default_domain = mds.xyz<br \/>\n\t&nbsp; }<\/span><\/span>\n<\/p>\n<p>\n\tAnd the following:\n<\/p>\n<p style=\"margin-left: 40px;\">\n\t<span style=\"font-family:courier new,courier,monospace;\"><span style=\"color:#008000;\">[domain_realm]<\/span><br \/>\n\t&nbsp; .nix.mds.xyz = NIX.MDS.XYZ<br \/>\n\t&nbsp; nix.mds.xyz = NIX.MDS.XYZ<br \/>\n\t&nbsp; mdskvm-p01.nix.mds.xyz = NIX.MDS.XYZ<br \/>\n\t<span style=\"color:#008000;\">&nbsp; .mds.xyz = MDS.XYZ<br \/>\n\t&nbsp; mds.xyz = MDS.XYZ<\/span><\/span><br \/>\n\t&nbsp;\n<\/p>\n<p>\n\tCheers,<br \/>\n\tTK\n<\/p>\n<p>\n\t&nbsp;<\/p>\n\n    <div class=\"xs_social_share_widget xs_share_url after_content \t\tmain_content  wslu-style-1 wslu-share-box-shaped wslu-fill-colored wslu-none wslu-share-horizontal wslu-theme-font-no wslu-main_content\">\n\n\t\t\n        <ul>\n\t\t\t        <\/ul>\n    <\/div> \n","protected":false},"excerpt":{"rendered":"<p>Problem is that you need&nbsp; dns_lookup_kdc = true in your \/etc\/krb5.conf under the&nbsp;[libdefaults] section file: [root@mysql01 ~]# kinit tom@mds.xyz kinit: Cannot find KDC for realm &quot;mds.xyz&quot; while getting initial credentials [root@mysql01 ~]# [root@mysql01 ~]# vi \/etc\/krb5.conf [root@mysql01 ~]# systemctl restart sssd [root@mysql01 ~]# kinit tom@mds.xyz Password for tom@mds.xyz: [root@mysql01 ~]# The other source of this [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-3515","post","type-post","status-publish","format-standard","hentry","category-unix-linux-admin-stuff"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/comments?post=3515"}],"version-history":[{"count":5,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3515\/revisions"}],"predecessor-version":[{"id":4840,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/posts\/3515\/revisions\/4840"}],"wp:attachment":[{"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/media?parent=3515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/categories?post=3515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microdevsys.com\/wp\/wp-json\/wp\/v2\/tags?post=3515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}