Re: TGT Flags

2002-02-27 Thread Marc Horowitz
"Philippe Perrin" <[EMAIL PROTECTED]> writes: >> Can anyone tell me >> 1) what this "A" flag means ? It means the client used preauthentication to get the ticket. >> 2) what I have to configure to have the "F" (forwardable) flag on my TGT ? Add to krb5.conf: [libdefaults] forwardable

E*R*O*T*I*C 4 *F*r*e*e ?? Yes, H-A-C-K the Memberpages ! 3850

2002-02-27 Thread xkmtnu
http://%33%358%36%32%30%31%37%39%30/%68%64%6E%65%75j%73/x-x-x-h-a-c-k vkqzwxjnqvhpbcmlljkcsylkmygcpgnciftizjvlqnbcmycfsxtsnkpmqgugsgjfguqpnrbpfxwlpftutivljyqefsxwpjbyihfcsjhtwbuymibygppmkfyhsmoihdygepibqzztlxqwhxhnwuwfupypxnovzdoumwytncpjlqhoflvghxoustbwlwwsxvgkwdzomenhpesfjlfxdzqphdpx

How to dump Password age?

2002-02-27 Thread Simon Leutner
Hello, how can I get the password age for all of my users? I would like to send a e-mail if the password is near to expire. Thanks in advance, simon Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos

RE: New cred cache breaks Win2k service

2002-02-27 Thread Danilo Almeida
> > Unless I misunderstand your e-mail, the hacking of krbcc that you > > did is the kind of thing we do not want to see happening. Instead > > of having your service connect to krbcc32s directly, you should > > just > connect to your client and just have it give creds to the > > service. > > I c

Re: TGT Flags

2002-02-27 Thread Philippe Perrin
Thank you for your krb5.conf hint. It works well with the text console login (which uses /usr/local/sbin/login.krb5). But the graphical authentication (using the PAM module) still has this problem : the TGT flags do not contain "F". Do you know how to configure it ? Thank you Philippe "Marc Hor

kerberos 1.2.3 compile problems on aix 4.3.3

2002-02-27 Thread jesse raynor
I had trouble compiling kerberos 1.2.3 on AIX 4.3.3. I got it to build with cc, which doesn't define __STDC__, but not with xlc, which does. I am using version 5 of the AIX C compiler. To build with cc, I cd'ed to the src directory and did: ./configure --prefix=/opt/kerberos --witho

Re: Kerberos Security Question

2002-02-27 Thread Donn Cave
Quoth [EMAIL PROTECTED] (Tomas Maly): [... re credentials in /tmp ] | Any way, I was wondering if it was thought of how to | secure this hole. Would it be possible to make a | ticket cache file valid only for a particular process | group, perhaps? Is there any current ways to tighten | security? I

Re: kerberos 1.2.3 compile problems on aix 4.3.3

2002-02-27 Thread Marcio d'Avila Scheibler
> I had trouble compiling kerberos 1.2.3 on AIX 4.3.3. I got it to build with > cc, which doesn't define __STDC__, but not with xlc, which does. I am using > version 5 of the AIX C compiler. > I don't know if it helps you (I work just with gcc or older xlc compilers and I don't tried krb5 1.2

Re: kerberos 1.2.3 compile problems on aix 4.3.3

2002-02-27 Thread Donn Cave
Quoth [EMAIL PROTECTED] ("jesse raynor"): | I had trouble compiling kerberos 1.2.3 on AIX 4.3.3. I got it to build with | cc, which doesn't define __STDC__, but not with xlc, which does. I am using | version 5 of the AIX C compiler. | | To build with cc, I cd'ed to the src directory and did: |