Your message dated Sun, 24 Dec 2006 14:21:58 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#402844: libsasl2-modules-gssapi-mit:
sasl-sample-client/sasl-sample-server authentication fails with GSSAPI mechanism
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: libsasl2-modules-gssapi-mit
Version: 2.1.22.dfsg1-7
Severity: important
GSSAPI authentication does not appear to work for the SASL sample
client and server. Of course, it is possible that I'm not doing
something wrong, given the lack of examples in the documentation.
Here's a transcript from the client:
----------------------------------------------------------------------
[EMAIL PROTECTED]:~$ kinit
Password for [EMAIL PROTECTED]:
[EMAIL PROTECTED]:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1001
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal
12/12/06 18:41:57 12/13/06 04:41:57 krbtgt/[EMAIL PROTECTED]
renew until 12/19/06 18:41:51
Kerberos 4 ticket cache: /tmp/tkt1001
klist: You have no tickets cached
[EMAIL PROTECTED]:~$ sasl-sample-client -s host -m gssapi -n
geomancer.nutwerk.org
service=host
Waiting for mechanism list from server...
S: TE9HSU4gQ1JBTS1NRDUgR1NTQVBJIFBMQUlOIEFOT05ZTU9VUyBOVExNIERJR0VTVC1NRDU=
recieved 53 byte message
Forcing use of mechanism gssapi
Choosing best mechanism from: gssapi
sasl-sample-client: SASL Other: GSSAPI Error: Miscellaneous failure (Generic
error (see e-text))
error was SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure
(Generic error (see e-text))
sasl-sample-client: Starting SASL negotiation: generic failure
----------------------------------------------------------------------
Here's the corresponding transcript from the server:
----------------------------------------------------------------------
geomancer:~# klist -k
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
3 host/[EMAIL PROTECTED]
3 host/[EMAIL PROTECTED]
geomancer:~# sasl-sample-server -s host
Generating client mechanism list...
Sending list of 7 mechanism(s)
S: TE9HSU4gQ1JBTS1NRDUgR1NTQVBJIFBMQUlOIEFOT05ZTU9VUyBOVExNIERJR0VTVC1NRDU=
Waiting for client mechanism...
----------------------------------------------------------------------
The error message is too vague for me to guess the cause of the problem.
--Mike
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing'), (50, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
--- End Message ---
--- Begin Message ---
On Sun, Dec 24, 2006 at 10:09:11AM -0500, Michael Richters wrote:
> I have now successfully tested sasl-sample-client & sasl-sample-server
> (and imtest) with GSSAPI authentication. Once my kerberos config
> files were corrected, everything worked. The error messages could
> certainly have been more helpful, but I know of no reason why this bug
> should not be closed now.
Great. Thanks for all your work.
Regards,
-Roberto
--
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com
signature.asc
Description: Digital signature
--- End Message ---
