topic Re: KERBEROS_V4 rejected as an authentication type in Operating System - Linux

KERBEROS_V4 rejected as an authentication type

sysad_boy — Thu, 07 Jan 2010 08:11:09 GMT

I am always encountering this kind of error when I'm running my script via ControlM.

How can I get rid of this error message?

Re: KERBEROS_V4 rejected as an authentication type

Matti_Kurkela — Thu, 07 Jan 2010 11:56:16 GMT

Either ControlM or your script obviously does something that requires authentication, and it attempts to use KERBEROS_V4.

Without knowing more about your setup, I cannot determine what that might be.

Wild guess: in RHEL 5, rsh, rlogin and ftp clients will attempt first to use Kerberos, then fall back to classic methods. In this case, this is not an error, but an informative message, reminding you that your password will be sent to the server in unencrypted plaintext.

MK

Re: KERBEROS_V4 rejected as an authentication type

Matti_Kurkela — Thu, 07 Jan 2010 12:05:15 GMT

Oops, clicked Submit too soon...

To stop your system from trying to use Kerberos, remove /usr/kerberos/bin from your PATH: this directory contains Kerberos versions of ftp,rcp,rlogin,rsh and telnet.

In RHEL5, this can be done by moving the krb5-*.sh and krb5-*.csh files away from /etc/profile.d directory:

mkdir /etc/profile.d/disabled
mv /etc/profile.d/krb5-*sh /etc/profile.d/disabled

This change will take effect at the next user session, so you may have to logout & login, then restart the ControlM agent (if you use one).

MK

Re: KERBEROS_V4 rejected as an authentication type

sysad_boy — Fri, 08 Jan 2010 07:36:04 GMT

error still encountered

Re: KERBEROS_V4 rejected as an authentication type

Matti_Kurkela — Fri, 08 Jan 2010 16:14:57 GMT

Please tell us:

- what is the name of your Linux distribution?

- what is the version of your Linux distribution?

- which version of ControlM are you using?

- are you running your script on the host that has the ControlM agent, or is the agent trying to run a script remotely on another host?

- what does your script actually do?

It is very hard to solve your problem by guessing the necessary details.

Hmm... I think some of the ControlM agent processes run from inetd/xinetd, so to make all ControlM processes pick up the new PATH settngs, you may have to restart inetd/xinetd too.

MK

Re: KERBEROS_V4 rejected as an authentication type

sysad_boy — Tue, 12 Jan 2010 05:53:26 GMT

My OS is
Linux Red Hat 5 release 2

My ControlM Version is 6.3.1

I am running my script on the host that has the agent.

Re: KERBEROS_V4 rejected as an authentication type

sysad_boy — Tue, 12 Jan 2010 06:37:17 GMT

do i really need to have xinetd installed?