Re: The token's validity period has expired

2004-08-16 Thread Markus Moeller
Is there a parameter to increase the time ? What is a context ticket ? Is it a session ticket ? Thanks Markus "Sam Hartman" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > "Markus" == Markus Moeller <[EMAIL PROTECTED]> writes: > > Markus> I get from time to time in my app

BC-SNC, MIT Kerberos V, SSO, GSS-API v2

2004-08-16 Thread Barbat, Calin
Hello everybody, I need help with Single Sign-On for SAPguis running on Windows clients to an SAP Application Server 4.6C running on a Linux SLES server with authentification against an Active Directory provided by a Windows 2000 Server. In the following I'll describe how far I got, so the spec

Java Kerberos

2004-08-16 Thread viway
Hi All Am new to Security, is any java apis available for connecting MIT KerberosV5 server. If not guide me in implmenting kerberos in Java Technology Thanks in advance expecting guidance. VinayIndiatimes Email now powered by APIC Advantage. Help! HelpClick on the i

export private interface "krb5_set_default_tgs_ktypes" defined in krb5.h

2004-08-16 Thread peter_yen
Hi All, I have tried to build up the MIT Krb-1.3.4 on Windows to export the private interface "krb5_set_default_tgs_ktypes" declared in \krb5-1.3.4\src\include\krb5.h. I have commented out the #if KRB5_PRIVATE directive in this specifc header file and added the compiled libraries into my VC6.0

Can't get ssh over k5/afs working well

2004-08-16 Thread Sensei
Hi. I have a mixed linux lab. A server based on debian (ssh 3.4p1) and clients based on gentoo (ssh version 3.8p1). My infrastructure is based on mit kerberos 5 and openafs. All I'd like to do is to make ssh sessions passwordless, based on the tickets. On both systems I use pam authentication

MIT Kerberos TGT forwarding + renewal bug?

2004-08-16 Thread Eric Andresen
Hi, I recently discovered a rather stickly issue regarding ticket forwarding. Mainly, if I ssh (using GSSAPI TGT delegation forwarding) to another machine when the initial TGT was halfway through its initial lifetime, let's say 30minutes for example, my resultant TGT on the remote machine has a

Running MIT Kerberos on Cygwin

2004-08-16 Thread Anderson Luiz Brunozi
Hello Kerberos folks! I'm trying to install MIT Kerberos 5 (krb5-1.3.4) on Windows, using Cygwin. After finding a patch to build Kerberos on Cygwin, i was able to install it. However, when i try to start the kerberos daemon /usr/local/sbin/krb5kdc, i keep getting the following error message on

Re: export private interface "krb5_set_default_tgs_ktypes" defined in krb5.h

2004-08-16 Thread Ken Raeburn
On Aug 12, 2004, at 18:48, <[EMAIL PROTECTED]> wrote: I have tried to build up the MIT Krb-1.3.4 on Windows to export the private interface "krb5_set_default_tgs_ktypes" declared in First of all, why do you need it exported? As you note, it is marked "private", and you shouldn't be surprised if

Re: export private interface "krb5_set_default_tgs_ktypes" defined

2004-08-16 Thread Jeffrey Altman
All private functions are compiled in Kerberos for Windows. However, not all private functions are exported from the DLLs. The MIT Kerberos team does not want to have multiple versions of the Kerberos DLLs being distributed. It makes compatibility between applications and distributions very diffi

RE: BC-SNC, MIT Kerberos V, SSO, GSS-API v2

2004-08-16 Thread Tim Alsop
Calin, We can solve this problem using our GSS library which works in a consistent manner with SAP SNC on all platforms (including Linux). Our product is "Certified for SAP NetWeaver" So, if you are interested in a BC-SNC supported gss library for Linux please refer to www.cybersafe.ltd.uk/links/

Re: export private interface "krb5_set_default_tgs_ktypes" defined in krb5.h

2004-08-16 Thread Sam Hartman
May I suggest you use the public interface krb5_error_code KRB5_CALLCONV krb5_set_default_tgs_enctypes (krb5_context, const krb5_enctype *); which does exactly the same thing? Kerberos mai

Re: The token's validity period has expired

2004-08-16 Thread Sam Hartman
> "Markus" == Markus Moeller <[EMAIL PROTECTED]> writes: Markus> Is there a parameter to increase the time ? What is a Markus> context ticket ? Is it a session ticket ? It's the ticket used to set up the context. Kerberos mailing list

Re: MIT Kerberos TGT forwarding + renewal bug?

2004-08-16 Thread Eric Andresen
The renewal times on the tickets in question are in excess of a week. On Mon, 2004-08-16 at 13:35, Sam Hartman wrote: > Your problem description seems problematic because it does not include > the renewable time of the tickets involved. Without that information > I cannot evaluate whether the sof

Re: MIT Kerberos TGT forwarding + renewal bug?

2004-08-16 Thread Sam Hartman
Your problem description seems problematic because it does not include the renewable time of the tickets involved. Without that information I cannot evaluate whether the software is functioning reasonably. Kerberos mailing list [EMAIL PRO

Re: MIT Kerberos TGT forwarding + renewal bug?

2004-08-16 Thread Sam Hartman
> "Eric" == Eric Andresen <[EMAIL PROTECTED]> writes: Eric> The renewal times on the tickets in question are in excess Eric> of a week. Eric> On Mon, 2004-08-16 at 13:35, Sam Hartman wrote: Including renewal times on the forwarded tickets? _

Re: MIT Kerberos TGT forwarding + renewal bug?

2004-08-16 Thread Eric Andresen
Yes, the forwarded ticket shows the same renewal time as the initial did. On Mon, 2004-08-16 at 14:05, Sam Hartman wrote: > > "Eric" == Eric Andresen <[EMAIL PROTECTED]> writes: > > Eric> The renewal times on the tickets in question are in excess > Eric> of a week. > Eric> On Mon,