Re: slave server and replication

2002-04-10 Thread klaas hagemann
rsync is a good idea, but as far as i can see from http://www.citi.umich.edu/u/kwc/krb5.load.txt it takes a lot more time to load the database then to send it over the network. And with rsync you still have this problem. Klaas - Original Message - From: Steve Langasek [EMAIL

Re: Encrypted Authentication

2002-04-10 Thread Someone
Erik Arneson wrote: Hi everybody, I'm new to the list and to Kerberos, so I apologize if this is a FAQ. In my rather brief amount of reading, I've gotten the impression that Kerberos uses DES encryption for the network-based authentication. As DES is relatively insecure, is there any

Re: Server not found in kerberos database

2002-04-10 Thread liulg
[EMAIL PROTECTED] (Srinivas Cheruku) wrote in message news:E0315628431FD611BB4300C04F1523769A3547@BG1MAIL... When i want to get a ticket by kinit,such as kinit -f test,Ii can get a ticket.but when i telnet the telnet server machine 10.30.10.56,through telnet -a -f -x 10.30.10.56, ,it tell

RE: Server not found in kerberos database

2002-04-10 Thread Srinivas Cheruku
Apr 10 16:39:27 10.30.10.56 krb5kdc[856](info): AS_REQ 10.30.10.56(88): ISSUE: authtime 1018427967, [EMAIL PROTECTED] for [EMAIL PROTECTED] Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ 10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, [EMAIL PROTECTED] for [EMAIL

ssh

2002-04-10 Thread klaas hagemann
Hi, where can i get ssh server and client supporting kerberos auth for linux? i apologize if this is a faq, but i haven't found anything. thanks klaas

Re: Telnet client

2002-04-10 Thread Jeffrey Altman
The TELNET AUTH and TELNET AUTH KRB5 option negotiations are specified in RFC 2941 and RFC 2942. They can be accessed from the RFC Editor's page http://www.rfc-editor.org and I keep copies of them along with my latest Internet-Drafts at http://www.kermit-project.org/standards.html In article

Re: Better interface detection? (was Re: krb5kdc crashes)

2002-04-10 Thread Tom Yu
cg2v == Chaskiel M Grundman [EMAIL PROTECTED] writes: cg2v He's not talking about msg_control/msg_accrights, but msg_name, cg2v which irix 6.5 claims to support: cg2v cg2v struct msghdr { cg2vcaddr_t msg_name; /* optional address */ cg2vint

Re: ssh

2002-04-10 Thread klaas hagemann
ok, i got openssh and two patches, one for gssapi and one for kerberos. i patched both succesfully and was able to make a new configure-file i configured and compiled it successfully with krb5-support (--with-krb5) and i can start the servrer successfully. Then i try to use ssh and get

listprincs

2002-04-10 Thread Raymond M Schneider
? It seems something has changed where you can no longer issue: $ listprincs luser You will get nothing back. If you issue: $ listprincs luser* You get potential several. and finally if you: $ listprincs [EMAIL PROTECTED] you get [EMAIL PROTECTED] Could somebody give me some info or

default principal confusion

2002-04-10 Thread Ken Grady
What is the correct way to do this? Or is it correct to allow both? And should an option be added to SomeNewSSH to allow either functionality (-k1 kerberos original -k2 extra principal...)? Openssh-3.1p1 uses the default principal is the same as the client and things seem to be compatable as

Educators Save up to 60% on Apple, HP, Lexmark ISO-9000 compatible printer cartridges

2002-04-10 Thread Barrys Desk
March 28, 2002 BCDWest Home Laserjet Toner InkJet Cartridges Copier/Fax Accessories Dear Educator, We have

Re: default principal confusion

2002-04-10 Thread Donn Cave
Quoth [EMAIL PROTECTED] (Ken Grady): |What is the correct way to do this? Or is it correct to allow both? | And should an option be added to SomeNewSSH to allow either | functionality (-k1 kerberos original -k2 extra principal...)? | Openssh-3.1p1 uses the default principal is the same as