Re: only inetd?

2004-09-09 Thread Russ Allbery
Enrico Carretti <[EMAIL PROTECTED]> writes: > I have a question: on the Kerberos doc I found some suggestions on how > to configure the inedt.conf file to set up a secure server; now I wonder > if kerberos server can run only via the inetd daemon or can be also > stand alones services. Which is th

Re: Kerberos Windows Client sign

2004-09-09 Thread Luis Daniel Lucio Quiroz
I know, is there any form, a wrapper program or another client? El Jueves 09 Septiembre 2004 12:30, Jeffrey Altman escribió: > The KFW kinit does not allow keyboard redirection. > > Luis Daniel Lucio Quiroz wrote: > > Helo All, > > > > I was wondering if there is away to make kerberos auth automat

Re: Kerberos Windows Client sign

2004-09-09 Thread Jeffrey Altman
The KFW kinit does not allow keyboard redirection. Luis Daniel Lucio Quiroz wrote: > Helo All, > > I was wondering if there is away to make kerberos auth automatic. The fact is > that I working on making a NT4 (samba) like domain work most closely like a > 2k-alike domain (I'm interesting on

Kerberos Windows Client sign

2004-09-09 Thread Luis Daniel Lucio Quiroz
Helo All, I was wondering if there is away to make kerberos auth automatic. The fact is that I working on making a NT4 (samba) like domain work most closely like a 2k-alike domain (I'm interesting on Kerberos and single-singon feature). On PDC all services are already kerberized, using pam or

Re: Kerberos v5 and Windows 2000 server

2004-09-09 Thread Jeffrey Altman
[EMAIL PROTECTED] wrote: > > > > I have recently seen info on the latest advisories for MIT Kerberos v5 > (8/31/04). I am new to Kerberos and know that windows uses it for its > authentication. How does these advisories affect Window 2000 server? > > Thanks for any info! > Bill It does not

Re: Key derivation with non-ASCII characters

2004-09-09 Thread Ken Raeburn
On Sep 8, 2004, at 09:14, Frank Taylor wrote: The client code is jKrb5 (from http://www.mit.edu/afs/athena/astaff/project/krb5/raeburn/jkrb5 with a few fixes and additions). Uh. I'm not used to people picking stuff up out of my random development spaces, but okay... I picked that up a while ago,

only inetd?

2004-09-09 Thread Enrico Carretti
Hi all, I have a question: on the Kerberos doc I found some suggestions on how to configure the inedt.conf file to set up a secure server; now I wonder if kerberos server can run only via the inetd daemon or can be also stand alones services. Which is the ansawer?? Thank in advance Enrico

Thanks to everyone for the great support, help and assistance!

2004-09-09 Thread Calin Barbat
Draft Notes for the configuration of single sign-on (SSO) from Windows clients to a SAP Linux server using SNC with the MIT Kerberos V libgssapi_krb5.so

Replication of password base AD -> MIT

2004-09-09 Thread Tobias Schenk
Hi, I have the following problem: I want to setup a win2003 domain controller using Kerberos. Also I have a linux machine which should offer many network services (SMTP, POP,...). These should also use Kerberos to make it convenient for the users. The drawback is that if the win box crashes, also

Kerberos v5 and Windows 2000 server

2004-09-09 Thread BNail
I have recently seen info on the latest advisories for MIT Kerberos v5 (8/31/04). I am new to Kerberos and know that windows uses it for its authentication. How does these advisories affect Window 2000 server? Thanks for any info! Bill Kerber

Re: Key derivation with non-ASCII characters

2004-09-09 Thread Frank Taylor
> Could you look at the salt that is being used? The easiest way to do > that is to try sending an AS request and see what you get back in the > etype-info structure? I have done some investigation now and have the following information. The Active Directory Domain (Kerberos realm) is DEV.PROPE

Does anyone object if KFW beta test announcements are made to this

2004-09-09 Thread Jeffrey Altman
The MIT Kerberos group is attempting to better communicate with KFW user community. In the past 18 months we have found that most users of KFW are unaware of beta releases and therefore fail to test them in their environments. This has resulted in a large number of dot-dot releases as bugs are o

Re: Replication of password base AD -> MIT

2004-09-09 Thread Jeffrey Altman
Tobias Schenk wrote: > Hi, > > I have the following problem: > I want to setup a win2003 domain controller using Kerberos. > Also I have a linux machine which should offer many network services > (SMTP, POP,...). These should also use Kerberos to make it convenient > for the users. > The drawbac