![[root@pcm-ipa-01 tmp]# klist klist: 未找到凭据缓存 (票证缓存 FILE:/tmp/krb5cc_0)未找到 freeipa kadmin 管理员主体](https://linux22.com/image/651598/%5Broot%40pcm-ipa-01%20tmp%5D%23%20klist%20klist%3A%20%E6%9C%AA%E6%89%BE%E5%88%B0%E5%87%AD%E6%8D%AE%E7%BC%93%E5%AD%98%20(%E7%A5%A8%E8%AF%81%E7%BC%93%E5%AD%98%20FILE%3A%2Ftmp%2Fkrb5cc_0)%E6%9C%AA%E6%89%BE%E5%88%B0%20freeipa%20kadmin%20%E7%AE%A1%E7%90%86%E5%91%98%E4%B8%BB%E4%BD%93.png)
我在 centos 上安装了 freeipa，重新启动服务后，似乎丢失了“kadmin”的身份验证
[root@pcm-ipa-01 ~]# kadmin init
Authenticating as principal root/[email protected] T with password.
kadmin: Client not found in Kerberos database while initializing kadmin interface
但是我可以直接使用用户“admin”进行身份验证
[root@pcm-ipa-01 ~]# kadmin -p admin
Authenticating as principal admin with password.
Password for [email protected]:
kadmin: list_principals
get_principals: Operation requires ``list'' privilege while retrieving list.
kadmin:
更新：
[root@ipaserver tmp]# ipa user-show admin
ipa: ERROR: did not receive Kerberos credentials
[root@pcm-ipa-01 tmp]# klist
klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)
答案1
你到底需要什么？
您应该使用 IPA CLI 而不是 kadmin。 http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/Kerberos_Errors.html