Proxiable

2002-02-13 Thread Sreedhar Gupta
Hi all, Can any one explain me, what is the difference between Forwardable Flag and Proxiable Flag and in which real time scenario Proxiable option will be used. Thanks in advance. Sreedhar Gupta * Disclaimer: The information in

Re: Ticket forwarding and IP addresses

2002-02-13 Thread Cesar Garcia
FYI, For those interested, here's a very simple patch to krb524d.c (release 1.2.2): Basically, the when looking up the key that krb524d will use to build the response, the key version number is not being assigned when using the keytab option. The code looks OK when using the KDB. I'll have to h

KfW and triple des problems

2002-02-13 Thread Todd Kover
is anyone aware of problems with KfW 2.1.2 and triple des encryption? [ This is all krb5. I have no krb4 support turned on anymore. ] I'm attempting to get WinCVS/cvs working with gserver against the 2.1.2 sdk and have been successful using keys in my age-old kdc (migrated over from v4) which

krb5-1.2.4-beta1 compile

2002-02-13 Thread Ray Schneider
ok.. ive been playing with the beta... ive tried various things, im trying to configure and compile under solaris 8...on an ultra5, the following seems to occur no matter what... (excuse the length) ./configure (i have put options here as well, or no options doesnt matter) bash-2.03# make makin

Re: pam_krb5 for solaris

2002-02-13 Thread Seth Meyer
> From: Seth Meyer <[EMAIL PROTECTED]>: Marcus Watts <[EMAIL PROTECTED]> > To: "vkd" <[EMAIL PROTECTED]> Does your krb5 library build have these features enabled: --enable-dnsbuild in support for Kerberos-related DNS lookups --enable-dns-for-kdcenable DNS lookups of Kerberos

single sign-on with kerberos V5 and ldap

2002-02-13 Thread Klaas Hagemann
hi there,   i have still a problem with kerberos and ldap.   i have got a ldap v3 directory (netscape iplanet) with all my user information. now i want to make singel sign on using kerberos V. how can i make kerberos storing all the keys in the ldap directory?   the user should log on using

BUG: kinit coredumps when changing expired password, potentially kpasswd as well

2002-02-13 Thread Alistair Mackay
Version: kerberos V 1.2.3 Location: src/lib/krb5/krb/gic_pwd.c line 271 Platform: Solaris 2.6 (though by its nature, should affect all) Description: When attempting to aquire a TGT from a server that has "User must change password at next logon" set, if a new password is entered that does not mee

Re: pam_krb5 for solaris

2002-02-13 Thread Marcus Watts
"vkd" <[EMAIL PROTECTED]> sends: > From: "vkd" <[EMAIL PROTECTED]> > Subject: pam_krb5 for solaris > Message-ID: > To: [EMAIL PROTECTED] > Date: Fri, 08 Feb 2002 21:27:05 GMT > > Where can I get proper pam_krb5 source that works on solaris? > > I got one from this