0

I recently botched a Kerberos install and have been trying to follow the walkthrough here.

However, now I've reached an awkward impasse and cannot add any principals. Using kadmin.local I receive the message:

add_principal: Principal add failed: Insufficient access while creating "admin@

The ACL contains:

*/admin *
admin *

More specifically, I see:

root@server:/home/server# kadmin.local
Authenticating as principal root/[email protected] with password.
kadmin.local:  addprinc admin
WARNING: no policy specified for [email protected]; defaulting to no policy
Enter password for principal "[email protected]":
Re-enter password for principal "[email protected]":
add_principal: Principal add failed: Insufficient access while creating "[email protected]".
kadmin.local:
3

1 Answer 1

0

Despite the question is old: Try to add a principal with realm, even if you have a default realm configured. I had similar issues, and using a realm solved them for me. And admin user is not very wise, use rather root/admin or similar: root/admin@[YOUR REALM]

1
  • This answer fails to explain how. This will still result in Insufficient Access.
    – aphid
    Sep 20, 2023 at 16:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .