Quoting Turbo Fredriksson <[EMAIL PROTECTED]>: > I've been trying to get Kerberos V to work (as a client) > on my Win98 at home without success - timestamp problems. > > Now I've tried on a WinXP at work. Same thing. The time > is correct! > > I'm not sure of the timezone though... > > On the Kerberos server (a Debian GNU/Linux) it's : > > Fri Sep 20 18:24:49 CEST 2002 > > On the windows machine, it say > > (GMT+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien > > which is correct. > > Any problem between 'CEST' and 'GMT+01:00'?
More investigations. This time on a Windows 2k Pro (newly installed only for this!). Got the log window on Leash32. Shows: ----- s n i p ----- [first time] lrealm is MYREALM krb_udp_port is 88 Getting host entry for FQDNOFKDC.. Got it. Sending message to IPTOKDC.. SentWaiting for reply.. received packet from IPTOKDC Received it Clen is 104 Trying next_string_to_key[1] Remembering 1 local 1032955279, server 1032955286 local time: Wed Sep 25 14:01:19 2002 server time: Wed Sep 25 14:01:19 2002 [second time] lrealm is MYREALM krb_udp_port_conf is 88 krb_udp_port is 88 Getting host entry for FQDNOFKDC.. Got it. Sending message to IPTOKDC.. SentWaiting for reply.. received packet from IPTOKDC Received it Clen is 104 Trying next_string_to_key[1] Remembering 1 local 1032955448, server 1032955448 local time: Wed Sep 25 14:04:08 2002 server time: Wed Sep 25 14:04:08 2002 ----- s n i p ----- First time the time was 7 seconds appart. Rerun 'ntpdate' on the KDC. The second time I tried Leash32, the time matched PERFECTLY! Still, I get only Krb4 tickets, no Krb5! The KDC says: 'preauth (timestamp) verify failure: No matching key in entry'. Any idea anyone? I've tried to get a ticket with 'kinit -5A' as well, didn't work either... -- CIA colonel Honduras Delta Force supercomputer Kennedy spy Semtex explosion class struggle Panama Ortega Soviet $400 million in gold bullion quiche [See http://www.aclu.org/echelonwatch/index.html for more about this] ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos