Re: ssh

2002-04-11 Thread klaas hagemann
SSH Kompiling seems to be ok, i compiled it without errors with ./configure --with-pam --with-kerberos5=/usr/local Befort i applied the patches and ran autoconf. I am not sure with these configuratioen files, is it possible für you to send me yours? Thanks, Klaas - Original Message

Re: Server not found in kerberos database

2002-04-11 Thread liulg
Thank very much. I have resolved my problem by your way. Thanks. Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos

RE: ssh

2002-04-11 Thread Srinivas Cheruku
1. Apply the Kerberos patch and then the Openssh-gssapi patch. 2. Run the autoreconf after applying the patches. (autoreconf version should be later than 2.50) #autoreconf 3. # ./configure--with-pam --with-kerberos5=MIT Kerberos Installation path --sysconfdir=/etc/ssh 4. #make 5. #make

Re: ssh

2002-04-11 Thread klaas hagemann
Hi, i did it this way, and the result is: when i try # ssh ipadress i get an segmentation fault but when i do #strace ssh ipadress everything works fine. Maybe i am to stupid to understand this, can someone explain this to me? Thanks, Klaas - Original Message - From:

Re: slave server and replication

2002-04-11 Thread Steve Langasek
On Wed, Apr 10, 2002 at 08:52:19AM +0200, klaas hagemann wrote: rsync is a good idea, but as far as i can see from http://www.citi.umich.edu/u/kwc/krb5.load.txt it takes a lot more time to load the database then to send it over the network. And with rsync you still have this problem. Ah,

OpenSSH 3.1p1 w/patches + MIT KRB5 + PAM

2002-04-11 Thread Derek Yarnell
I am trying to replace the need to have a stored crypt on the local machine through the use of Krb5. However I am having some problems with ssh and krb5. This is on Solaris 8. Ok I have patched Openssh 3.1p1 with the GSSAPI patches and rebuilt with --with-pam --sysconfdir=/etc/ssh

Re: Possible problem with MIT krb5 1.2.4 and MS keytabs

2002-04-11 Thread Sam Hartman
David == David Bailey [EMAIL PROTECTED] writes: David Hi, I'm not sure if this is a krb5 problem or a feature in David the krb5 for AFS kit but I thought I'd ask here for David starters. David I've managed to get krb524d running on win2k using just the David keytab option.

Re: Encrypted Authentication

2002-04-11 Thread Ken Raeburn
Erik Arneson [EMAIL PROTECTED] writes: Thanks, that's the kind of thing I was looking for. Is there any way to get krlogin to use 3DES, or should I just use a patched version of OpenSSH instead? The rlogin MIT is shipping now should do 3DES encryption. (Of course, ssh may have other

FileZilla, Kerberos 5, Win98

2002-04-11 Thread Anthony Olejnik
Hi, I'm unable to get FileZilla (windows FTP client w/kerberos 5 support) to connect to my server from Win98 machines. I've tried it on a number of other OSs (ex ME, NT WS 4.0, 2000 pro, XP pro, and XP home). In those cases, FileZilla (v1.8 thru 1.9.4a) works fine (with K5 tickets obtained

gssapi and CCC command

2002-04-11 Thread Glen Matthews
Hi, i'm writing an ftp client using the gssapi with kerberos, and am somewhat puzzled by the CCC command behaviour. basically, when i enable clear channel commands using CCC, it is accepted with a 200-level message. i can enter various commands (notably PBSZ, PROT - these seem to work ok).

Re: gssapi and CCC command

2002-04-11 Thread Marc Horowitz
I haven't looked at the MIT code in a long time, but I just took a quick glance, and it looks like either the username is invalid, or the initial password request fails. If you can look at the kdc logs, find out if the AS-REQ is really succeeding. I also have to mention that using CCC isn't a