IPA client configuration fail on AIX client

[Lakshan Jayasekara]

Hi all,

Once initiating the kinit admin command below error pops up

bash-4.3# kinit admin
Password for [e-mail]:
xxxxxxxxxx
java.net.ConnectException: Connection refused
        at java.net.PlainSocketImpl.socketConnect(Native Method)
        at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:413)
        at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:274)
        at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:261)
        at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
        at java.net.Socket.connect(Socket.java:559)
        at com.ibm.security.krb5.internal.TCPClient.<init>(TCPClient.java:40)
        at com.ibm.security.krb5.i.run(i.java:39)
        at java.security.AccessController.doPrivileged(AccessController.java:379)
        at com.ibm.security.krb5.h.a(h.java:74)
        at com.ibm.security.krb5.h.a(h.java:88)
        at com.ibm.security.krb5.h.a(h.java:31)
        at com.ibm.security.krb5.internal.tools.Kinit.a(Kinit.java:97)
        at com.ibm.security.krb5.internal.tools.Kinit.<init>(Kinit.java:108)
        at com.ibm.security.krb5.internal.tools.Kinit.main(Kinit.java:139)
com.ibm.security.krb5.KrbException, status code: 0
        message: java.net.ConnectException: Connection refused

if you have any clue let men know.

Lakshan Jayasekara
Senior Systems Engineer
Mobile: [phone] | Dir: [phone]
General:[phone]  Ext: 949  | Fax: [phone]
LankaClear (Pvt) Ltd, Level 18, Bank of Ceylon Head Office,
“BOC Square”, No. 01, Bank of Ceylon Mw, Colombo 01, Sri Lanka.
http://www.lankaclear.comhttp://www.lankaclear.com/

[cid:image809ccd.JPG@751704c7.46b6c6bd]

Confidentiality Notice: The information contained in this message is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the author immediately by replying to this message and delete the original message. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. This email has been scanned for all viruses by the Symantec End Point Protection Email Security System.
[cid:imagee396cf.JPG@b84c98ce.49a391a5]http://

[Harald Dunkel]

Hi Lakshan,

AIX 7.1 provides a script to configure Kerberos, e.g.

# export PATH=/usr/krb5/sbin:/usr/krb5/bin:/usr/bin:/etc:/usr/sbin:/usr/ucb:/usr/bin/X11:/sbin:/usr/java6/jre/bin:/usr/java6/bin
# config.krb5 -C -r EXAMPLE.COM -d example.com -c ipa1.example.com -s ipa1.example.com

This link might be helpful:
https://aerostitch.github.io/linux_and_unix/AIX/AIX-Security-Kerberos_Authen...

Its about AD integration, but it shows how it is supposed to work.

Hope this helps
Harri