无法获取Kerberos服务票证:KrbException:在Kerberos数据库中找不到服务器(7) [英] Cannot get Kerberos service ticket: KrbException: Server not found in Kerberos database (7)

问题描述

我正在使用GSSAPI进行开发，并且我的代码可以与普通的MIT Kerberos 5服务器配合使用来完成某些客户端/服务器工作.我现在正在验证它是否可以针对Active Directory正常工作，并且遇到了问题.

I'm developing using the GSSAPI, and I have code which works with a vanilla MIT Kerberos 5 server to do some client/server work. I'm now verifying it's functionality against Active Directory and I've hit an issue.

我已对服务器进行身份验证并正在监听.我可以让客户端登录.出于记录目的，这是基于 http://thejavamonkey.blogspot的代码. com/2008/04/clientserver-hello-world-in-kerberos.html .但是，我无法让客户端从AD取回票证以获取其与服务器之间的会话.我收到KrbException:在Kerberos数据库(7)中找不到服务器，并且我无法弄清楚将其添加到正确的位置.我尝试将带有ip的服务器名称放入hosts文件，更新dns，放入服务器记录等，但是没有运气.

I have my server authenticated and listening. I can get the client to login. For the record, this is code based off of http://thejavamonkey.blogspot.com/2008/04/clientserver-hello-world-in-kerberos.html. However, I cannot get the client to get the ticket back from AD to get the session between it and the server. I get KrbException: Server not found in Kerberos database (7), and I cannot figure out where the proper place is to add it. I've tried putting the server name with ip in the hosts file, updating dns, putting in server records, etc, with no luck.

如果有人知道在哪里更新AD以在Kerberos数据库中设置服务器的合适位置，那就太好了！

If anyone knows where the proper place is to update AD to set a server in the Kerberos Database, that would be great!

推荐答案

此异常来自客户端，对吗? 请对服务器主机名执行正向和反向DNS查找.您的服务器的DNS条目不正确.它们对于Kerberos绝对至关重要.在您的情况下，正确的位置是您的DNS服务器:域控制器.找出您的DNS服务器的IP地址，然后与您的管理员联系.另一个选择是缺少SPN，请检查一下.

This exception comes from the client, right? Please perform a forward and reverse DNS lookup of the server hostname. Your server has incorrect DNS entries. They are absolutely crucial for Kerberos. The proper place is your DNS server, in your case: domain controller. Figure out the IP address of your DNS server and contact your admin. The other option is a missing SPN, please check that too.

这篇关于无法获取Kerberos服务票证:KrbException:在Kerberos数据库中找不到服务器(7)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！