Kadmin: Missing parameters in krb5.conf required for kadmin client while in

Hi all
When i am going to run commands like
kadmin addprinc -randkey
kadmin ktadd -k
i am receiving kadmin: Missing parameters in krb5.conf required for kadmin client while ininitializing kadmin interface
any ideas??
What kind of parameters are missing???
thanks a lot

Hi,
It is a common problem. I used Oracle Linux to sort it out.
Perhaps you're using the wrong command? AFAIK kadmin should be used when working remotely. You don't say where you are in relation to the server? If sitting at the server you should be using kadmin.local. For example if I issue:
sudo kadmin.local
I get:
Authenticating as principal root/admin@LKDC:SHA1.EB237F611F07B2E8A636804052E8F7252BBA978F with password
If I issue:
sudo kadmin
I get:
Authenticating as principal root/admin@LKDC:SHA1.EB237F611F07B2E8A636804052E8F7252BBA978F with password
If I issue:
sudo kadmin
I get:
Authenticating as principal root/[email protected] with password.
kadmin: Missing parameters in krb5.conf required for kadmin client while initializing kadmin interface
A vital difference. Issuing:
sudo kadmin.local -q list_prinicpals
show show successfully kerberized users, services & hosts. Changing it to kadmin -q list_principals shows nothing except the error message. The above examples are for a client machine.
If you have any questions, ask.
Kirill Babeyev

Similar Messages

  • Minimum Hardware Requirement for Oracle11gAS Client PC

    as subject, can anyone give me some feedback? thanks!

    Assuming you are referring to Fusion Middleware 11, I will start by saying that this is a product set of many components and install options. To even offer a suggested recommendation for hardware would heavily depend on exactly what you are planning to install and do with this installation.
    I would recommend review the product installation guides. That said, when reviewing the minimum requirements for memory (RAM), I would recommend that you consider at least adding 15-20% more than what is document. Remember that these are minimum requirements for installation and basic use and not requirements to actually use these products in production with load.
    Product Documentation
    http://download.oracle.com/docs/cd/E21764_01/index.htm
    System Requirements
    http://download.oracle.com/docs/html/E18558_01/fusion_requirements.htm
    Also note that in most cases, reference to memory (RAM) is for the product and not necessarily the box. Unless otherwise noted in the document, you need to consider everything else you are running on the machine including the OS. So, for example, if the install guide says you need a minimum of 2gig of RAM, this does not take into account what the OS needs. So, in this example, consider the 2gig documented plus 20% (as suggested above) plus about 1.5 gig for the OS and other minimal apps running, you would need approximately 4gig of RAM just to complete an installation and execute basic features. In many cases the documentation now refers to "minimum RAM" and "available RAM". "Available RAM" in the document refers to RAM plus swap (virtual memory). My recommendation is not referring to swap. Although the documentation is correct and does work, you will be much happier with more RAM installed.
    Bottom line, in the case of RAM, more is always better. However, remember that on some 32bit OSs there is a limitation as to how much RAM can be accessed. Be sure to refer to the OS documentation for details.
    I forgot to mention, your question would probably get better feedback in the "Applcation Server" forum area:
    Oracle Application Server - General
    Edited by: Michael Ferrante on Aug 2, 2011 10:21 AM

  • Minimal requirements for remote client app to call a EJB 3 session bean

    I'm just starting to get into EJBs, trying to learn the EJB 3 APIs. I kind of understand the setup on the server side to create a session bean. What I don't understand is what I would have to deploy for each of the remote client app (Swing-based GUI or something like that) installations. Of course, the client app code would have to be deployed to each client desktop, but what stuff related to the session bean? Just the session bean interface class?
    For ease of discussion, let's say my bean is CalculatorBean, having two interfaces, CalculatorRemoteIface and CalculatorLocalIface. Let's also say my client app, CalculatorUI, is a simple Swing-based GUI that grabs a reference to a CalculatorBean.
    Other than just the Swing-based classes and the JRE, what JARs/classes will I want to deploy to each desktop?
    (Please assume the latest Sun Java System App Server 9 and Java EE 5, if you are familiar with them.)

    Personally- I would deploy your backend
    in EJB 3.0, but then expose it as a web service. It
    is MUCH easier for your clients to connect to a web
    service (and mantain that code), then to have them
    connect via RMI/JNDI.Oh, I would say it's quite the opposite. RMI/JNDI is MUCH easier from a client point of view than web services. To make web services work easy from the client side you have to generate code and the tools that generate code from a web services wsdl file doesn't do a great job today. But that was not the question. But take some time reading this article about webservices...it's quite funny and spot on: http://wanderingbarque.com/nonintersecting/2006/11/15/the-s-stands-for-simple
    Now to your question, yes you will need the remote interface on the client side.
    /klejs

  • Local admin priveleges required for Mobile Client

    Anyone overcome a problem with the mobile client requiring local admin priveleges to run?

    hi peter,
    pls see the below urls.......
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/953928ff-0701-0010-43a0-b18b5e6ffeed
    The Passwords Control Panel has a "Remote Administration" tab that
       works only if you have networking installed. If you use a central
       server, you can assign administrative privilege to a SUPERVISOR or
       Domain Admin.
       First, install File & Print Sharing for either MS networks (for a pure
       Win95 or NT domain network) or NetWare (For NetWare networks). If you
       use FPS for NetWare, keep SAP advertising OFF. In addition, install
       the Remote Registry service from Network Control Panel, as a Service
       (in ADMINNETTOOLSREMOTREG on the CD-ROM) on the remote machines. You
       can do this (and even enforce this) when you install Win95 as well.
       Now, if the workstations use User level security (highly
       advisable on NT Domains and NetWare networks), Setup will
       automatically enable remote administration for ADMIN and SUPERVISOR
       (NetWare) or DOMAIN ADMINS (NT Domain). If the stations use passwords
       instead of user lists (Share level security), or you don't have a
       central server, you will need to manually enable Remote Administration
       and supply a password to each station. Remote Administration settings
       will differ with each type of network client installed.
       Once done, you (the administrator) can control computers via Network
       Neighborhood. Right-click on any Win95 station and select
       "Properties". You will see a "Tools" tab that lets you edit the
       Registry, view network activity, or even browse the hard drives, on
       the remote computer. REGEDIT and POLEDIT also works on these stations.
       Of the tools listed, Remote Registry service is the biggest service
       (250 KB). To free up memory so you don't slow down the machines, check
       out How to Prevent Random Hard Drive Access, which also frees
       lots of memory for these services.
    7.6.3.1. ...on a Windows NT network?
       Install FPS for MS networks, install Remote Registry service, and
       enable User level security. Remote Admin privileges are
       automatically given to anyone in the Domain Admins group on the domain
       controller. Re-boot. Then, go to another Win95 station, log in as
       Administrator (or anyone else in Domain Admins) and get properties on
       the remote station from Network Neighborhood.
       WARNING: This service will allow you to remotely edit an NT Server's
       Registry! I was able to get in to several (but not all) Registry keys
       on my own NT server by logging in as a member of Domain Admins. I'd
       hate to think what could happen to my poor server if someone ran
       REGEDIT on this network with malicious intent!
       WARNING: Remember the NetWare C$ bug? It's back, this time in FPS for
       Microsoft networks! Now if you perform a Remote Admin session on a
       Win95 station and view its hard drives, the Admin shares
    machinec$) remain active, available for read-only viewing when a
       user types
    machinec$ from Start Menu/Run. This bug may have always
       been around, but I suspect it emerged with Service Pack 1.
    7.6.3.2. ...on a Peer Win95 network?
       You don't need to install Remote Registry service on the workstations
       to use peer to peer remote administration. You only need a file and
       print sharing service. When you use the Admin tools, the target
       computer will prompt you for a password.
       Be sure to set this password on all the workstations you want to
       administer remotely.
       NOTE: According to the Remote Registry readme files, Remote Registry
       service only works if you use User Level Security from a central
       server.
    7.6.4. ...user level access?
       User Level access spares us the potential of lost passwords and
       multiple, security-killing, cached passwords, because the passwords
       remain on the central security provider. You need only log in once and
       type your password once, and you have access to any resources shared
       on the network that have you on their access list.
       Enable User Level security from Network Control Panel, in Access
       Control. Pick a security provider (the name of an NT domain, NetWare
       server, or other central server if your client/service software allows
       for it). The next time you re-boot, all your share requesters and
       password requesters will have user list requesters in their place. You
       could also enforce user level security via system policies.
       If the server is a NetWare 4.x server, you will need to set a Bindery
       context on it. This will allow all NDS clients access to any Win95
       stations sharing resources via FPS for NetWare.
       Unusual combinations to avoid:
    FPS for MS networks, using a NetWare server as security provider
           (WFWG stations can't get access then! Win95 machines could get
           access, however)
    FPS for NetWare, using an NT server as a security provider (Quite
           impossible, as the NCP server doesn't recognize NT security)
    FPS for NetWare, using Share level security (It won't let you; NCP
           servers don't allow separate logins)
    7.6.5. ...server-based setup and MSBATCH.INF
    thanks
    karthik

  • Help required for ---- Java Client  -- XI -- R/3

    Hello,
    *My Java Client is on Server A. My XI is on server B. I had wsdl (webservice) with me .*
    How to call wsdl (webservice) from Java Client that is on Server A to XI that is on server B.
    Pls help
    Regards

    Good Morning Prateek,
    I have tested with Altoval XML spy . It is working fine.
    Altoval XML spy (on my local machine) -- XI -- R/3.
    Now instead of xml spy I want java client  -- XI -- R/3 with scanerio that javal client is on server A and XI on server B.
    2. For that request parameter (O/B Interface) I have made wsdl (webservice) through XI .
    After making wsdl it ask to save that wsdl.I have saved that wsdl currently
    in my local machine.
    3.How to call this wsdl (webservice) from Java Client that is on Server A to XI that is on server B.
    Pls explain me the all the steps in detail and also send me links/docs for it.
    Regards

  • JMS Grid, SeeBeyond IQ, Sun JMQ jar files required for JMS Clients

    I'm trying to determine the Jar files required to connect to JMS Grid, IQ, and JMQ. I am testing connectivity to each product independently and I think I may have copied over more files than necessary.

    I'm trying to determine the Jar files required to connect to JMS Grid, IQ, and JMQ. I am testing connectivity to each product independently and I think I may have copied over more files than necessary.

  • Serial Required for Each Client

    I think I made a mistake, or I just wasn't thinking.
    I have 4 xServes that I was planning to set up as a SAN. Do I have to have 4 separate copies of xSAN for each xServe that I will have connected to the SAN?
    I can't use 1 Serial for all 4 machines, and I'm getting an error about duplicate serial, so I assume I messed up.
    Thanks for the help!

    Every CPU needs it's own, unique copy of the software.
    Well, I think it is slightly different. In my opininion each ethernet interface used for the metadata needs a serial.
    An MDC will work with any machine as long as it has a unique serial
    In practice this means: each machine needs a serial. This is important in these days with multiple cpu's and multiple cores.

  • 802.11r (Fast Transition) - multiple WLANs required for legacy clients?

    Hello,
    I have a Cisco 5508 WLC with AIR-CAP3502E-E-K9 APs. I want to enable 802.11r (Fast Transition) and understand that some legacy clients may not support 802.11r and therefore if you select, for example, FT 802.1X as an authentication key management, legacy clients may not be able to connect. The Cisco documentation suggests creating a second WLAN with the same SSID, so one WLAN uses FT 802.1X and the other WLAN uses 802.1X.
    But when you edit the layer 2 security for a WLAN it is possible to select FT 802.1X and 802.1X. Does this mean there isn't a need for two WLANs with the same SSID? If the client can't authenticate using FT 802.1X will it fall back to 802.1X? Or is the recommendation to always create two WLANs with the same SSID but different authentication key management and the client will connect to which ever one has the "best capabilities"?
    For testing I can't find any non-802.11r devices so it's difficult for me to see what would happen if I had one WLAN but with both FT 802.1X and 802.1X selected
    Many thanks.

    If you remove FT from the WLAN, does the 3G connect ? When FT is enabled, some clients wont connect, thats been my experience.
    "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
    ‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

  • SAP NOTE REQUIRED FOR UPDATE TERMINATION WHILE POSTING GR SUBCONTRACTING

    Hi all,
    Please treat this as very urgent...
    below is the dump error analysis
    Runtime Error          SAPSQL_ARRAY_INSERT_DUPREC
    Except.                CX_SY_OPEN_SQL_DB
    Date and Time          25.06.2008 07:27:03
    User and Transaction
         Client.............. 800
         User................ "EDWIN"
         Language key........ "E"
         Transaction......... "MIGO "
         Program............. "SAPLKAUP"
         Screen.............. "RSM13000 3000"
         Screen line......... 2
    Information on where terminated
         The termination occurred in the ABAP program "SAPLKAUP" in "INSERT_TAB
         The main program was "RSM13000 ".
         The termination occurred in line 464 of the source code of the (Includ
          program "LKAUPF01"
         of the source code of program "LKAUPF01" (when calling the editor 4640
         The program "SAPLKAUP" was started in the update system.
         Processing was terminated because the exception "CX_SY_OPEN_SQL_DB" oc
          the
         procedure "INSERT_TABLES" "(FORM)" but was not handled locally, not de
          the
         RAISING clause of the procedure.
         The procedure is in the program "SAPLKAUP ". Its source code starts in
         of the (Include) program "LKAUPF01 ".

    hi buddy
    This kind of problem generally occures when you have not defined Number range. Please check the configuration. It may be due to insufficient catche memory. if so you may get it resolved with your basis person.
    regards
    kunal

  • Requirement for SYSDBA login while deploying

    Why do I have to login as SYSDBA when we need to deploy a .NET stored procedure?
    Normally, I can create Packages, procedures and everything without a SYSDBA login within the schema I created.
    Does this mean every stored procedure developer in an organization have to have SYSDBA priviliges? This does not make any sense.
    We are trying to make the conversion from PL/SQL Developer to Visual Studio .NET to develop/manage PL/SQL code, but stuff like this makes us stop.

    The users are already different. The purpose of this whole thing is to prevent network admin. users to login to oracle database as sysdba.

  • Special consideration for coding clients while using weblogic clustering

              Hi.
              I wanted to know whether there are any special consdirations to
              be taken while coding clients(servlets in our case) for EJBs when
              we are using clustering of App servers.
              In our setup, we are following the recommended 2-tier architecture
              for Weblogic5.1
              thanks and regards,
              Amol
              

    Amol wrote:
              > Hi,
              > adding a couple of points to the previous mail:
              > 1. In case of servlet failure after doXXX() method has been
              > called and before the method returns, if the app server
              > fails, will doXXX() be called again on the servlet in the
              > secondary server?
              > 2. How much time does it take for the servlet session on
              > one machine to be replicated on the second machine when
              > using in-memory replication.
              It depends on the size of the object and complexity.
              -- Prasad
              >
              > Thanks,
              > Amol
              >
              > "Amol" <[email protected]> wrote:
              > >
              > >Hi kumar (and everybody),
              > >
              > >Your opinion resolves the doubt i had in mind, since even
              > >WebLogic
              > >docs do not say anything about clustering affecting the
              > >coding
              > >of bean clients.
              > >
              > >However may I request you to please evaluate the same
              > >query with
              > >respect to the following conditions:
              > >1. The Session bean calls a stored proc on the db. After
              > >the call
              > >to stored proc and before the stored proc returns with
              > >the results,
              > >the app server fails.
              > >Here there could be two cases of interest, a) Stored proc
              > >does
              > >a write on db -OR- b) Stored proc does only a read on
              > >db
              > >2. The Session bean calls an Entity bean which "writes"
              > >to the
              > >db. The db write is successful, but before the entire
              > >call to the
              > >session bean is completed(that is before user gets his
              > >results)
              > >the Server fails. Now permanent changes have been made
              > >to the db,
              > >but client doesnt get the results.
              > >
              > >Please note the fact that we are using recommended 2-tier
              > >architecture
              > >and in this case server failure would imply failure of
              > >Servlet
              > >as well as the beans.
              > >
              > >Regards,
              > >Amol
              > >--------------------------
              > >
              > >Kumar Allamraju <[email protected]> wrote:
              > >>Absolutely not. Make sure the objects you are putting
              > >>in the session are
              > >>serializable.
              > >>
              > >>
              > >>
              > >>Amol wrote:
              > >>
              > >>> Hi.
              > >>> I wanted to know whether there are any special consdirations
              > >>to
              > >>> be taken while coding clients(servlets in our case)
              > >>for EJBs when
              > >>> we are using clustering of App servers.
              > >>>
              > >>> In our setup, we are following the recommended 2-tier
              > >>architecture
              > >>> for Weblogic5.1
              > >>>
              > >>> thanks and regards,
              > >>> Amol
              > >>
              > >
              Cheers
              - Prasad
              

  • What are the System Requirements for Web Server hosting Adobe Air application

    Working on a project that is using Adobe Air . The Adobe support site has system requirements for the client side application, but for the server side, what are the system requirements?
    Using a Windows server, would expect to have approx. 100 concurrent connections at any given time.

    Adobe AIR applications are installed on the end user's computer. They are not hosted on a web server. You can deploy an AIR file, which is the installer file for an AIR application, via your web server.

  • Requirement for client and server installation

    Hi,
    I am using Oracle database 10g and Oracle Developer 10g.I'd like to make a client server application.
    1. What installation is required for the server side?
    2. What installation is required for the client side?
    3. I'd like the client to access the form application using internet browser.What are the configuration should I fullfil?
    Many Thanks,
    Imelda

    Hi,
    there is no client-server anymore in Oracle Forms. Its a web only deployment. So 1-2 no longer apply.
    3) You need to install Oracle Jinitiator on the client or the Java 1.4 Plugin. Both can be configured for automatic installation.
    See the Oracle Application Server documentation and whitepapers on otn.oracle.com/products/forms to learn about how to install and run Forms Services
    Frank

  • Questioners, Proposal Document and Estimation for SAP BI for New Client

    Hi All,
    I currently working SAP BI 7.0, My project Manager provide new assisgnment for me following below
    my requirment is I want to Prepare SAP BI Questioners, Proposal Document and Estimation how to prepare this three activities. Beacuse my Organization getting new Cusomer asking this three activities.
    Please provide me any one solutions....
    ASAP.... please
    Thanks in Advance........
    Thanks & Regards,
    Bharathi

    It sounds like you want to ask the client some questions to work out what they want from their BI project.
    You have probably been provided with some information about the client and about why they are talking to your company. Use this to choose some specific questions or to try to uncover particular challenges and requirements for that client.
    Based on the requirements you believe they have, you should provide a high level project plan - i.e. what activities you would do, a rough indication of timelines, number of resources, etc.
    Based on this you can estimate how much the project would cost. The cost side should be validated by the account manager in your company as they may know what sort of project scales they usually take on and what sort of costs they generally find acceptable.

  • Classpath for remote client

    Hi,
    Is there a minimum package of classes (.jar, .zip) that are required for
    remote client application to call EJBs in WL 5.1 container ?
    My remote application works fine if I include WL_HOME/classes in its
    classpath. The problem is that WL_HOME/classes directory is huge. I am
    looking for some lightweight package of classes that would contain only
    client side implementation of WL's RMI, JNDI and EJB - just enough to
    call EJBs from remote client application.
    I couldn't find such .jar in the WL 5.1 installation.
    Can anybody help ?
    thanks,
    Rafal

    These is no such jar provided by BEA. You can try to create one using
    verbose2zip: http://www.weblogic.com/docs51/techstart/utils.html#verbosetozip
    If network speed allows for it, you can network classload from WebLogic :
    http://dima.dhs.org/misc/ThinClient.jsp or
    http://dima.dhs.org/misc/ThinClient2.jsp
    (this will download few hundred k, so it is not acceptable for a client
    connected via 28.8 modem).
    Rafal Mantiuk <[email protected]> wrote:
    Hi,
    Is there a minimum package of classes (.jar, .zip) that are required for
    remote client application to call EJBs in WL 5.1 container ?
    My remote application works fine if I include WL_HOME/classes in its
    classpath. The problem is that WL_HOME/classes directory is huge. I am
    looking for some lightweight package of classes that would contain only
    client side implementation of WL's RMI, JNDI and EJB - just enough to
    call EJBs from remote client application.
    I couldn't find such .jar in the WL 5.1 installation.
    Can anybody help ?
    thanks,
    Rafal--
    Dimitri

Maybe you are looking for