Some GUI tools.

2004-09-20 Thread Nils O.
Hello, Somebody interrested in doing some testing ? I made some GUI tools for klist and kinit, see http://utelsystems.dyndns.org/code/gktools/ -- Nils O. Selsdal www.utelsystems.com Kerberos mailing list [EMAIL PROTECTED]

Re: UNIX GSS-API / Windows SSPI :

2004-09-20 Thread Norbert Klasen
--On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard wrote: How can I check this and, second question, how can I generate a keytab with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC crypto type: [- /] crypto :

Re: UNIX GSS-API / Windows SSPI :

2004-09-20 Thread Jacques Lebastard
Douglas E. Engert wrote: If your service is running on Unix, then you must make sure that you create a keytab containing entries for each of the keys that Windows can produce for the SPN. (RC4-HMAC, DES-CBC-MD5, DES-CBC-CRC). The DES enctypes will only be used if the account associated with the

Kerberos des3-cbc implementation mode???

2004-09-20 Thread Ahluwalia, Ish
Hi All: Could anyone please advice as to what is the mode of the Kerberos 3des-cbc implementation? Is it implementing OUTER CBC or INNER CBC mode? Thanks. IA Kerberos mailing list [EMAIL PROTECTED]

Re: UNIX GSS-API / Windows SSPI :

2004-09-20 Thread Douglas E. Engert
The MIT ktutil has an addent subcommand added in 1999-08-06 sometime prior to version 1.2.2. Heimdal implemented the add subcommand in March of 1998. As you point out the Solaris 9 verison of ktutil does not have this. I don't think it has arcfour support in the libs either. We use MIT Kerberos

Memory leaks in krb5?

2004-09-20 Thread Derrick Schommer
I was running valgrind to check some of my kerberos authentication and ran into this: ==11600== 28 bytes in 1 blocks are definitely lost in loss record 9 of 12 ==11600==at 0x1B90340D: calloc (vg_replace_malloc.c:176) ==11600==by 0x125624: decode_krb5_enc_cred_part (in

Looking up Kerberos error codes

2004-09-20 Thread Jelmer Vernooij
Hi, Trying to get krb5 authentication working together with PostgreSQL, I stumbled across a couple of error codes that I can't place. The PostgreSQL error logs report that krb5_recvauth returns error '103' when connecting from one host and '13' when connecting from another, but I haven't been

Re: ssh-krb5 problems

2004-09-20 Thread Luis Daniel Lucio Quiroz
do you have your host/fqdn.server2 realm done? or your ssh/fqdn.server2? El Domingo 19 Septiembre 2004 05:00, [EMAIL PROTECTED] escribió: Hi people, thks to all of you that help me some days ago. Know, i have a smaller problem, but still is a problem. Scenario: 1 KDc, and two

Re: Looking up Kerberos error codes

2004-09-20 Thread Jeffrey Hutzelman
On Monday, September 20, 2004 21:42:21 + Jelmer Vernooij [EMAIL PROTECTED] wrote: Hi, Trying to get krb5 authentication working together with PostgreSQL, I stumbled across a couple of error codes that I can't place. The PostgreSQL error logs report that krb5_recvauth returns error '103'

RE: Looking up Kerberos error codes

2004-09-20 Thread Actually davidchr
If you don't already have a mechanism for this, ERR.EXE is a great (Windows) tool for looking up error codes, including a good number of Kerberos errors: http://www.microsoft.com/downloads/details.aspx?FamilyId=BE596899-7BB8-4 208-B7FC-09E02A13696Cdisplaylang=en. err /kerberr.h 13 # kerberr.h

When does krb5_rd_req return ENOENT?

2004-09-20 Thread Fredrik Tolf
I'm having a bit of trouble here... I have written a server program that uses Kerberos authentication, and it has been working beautifully until today when it crashed (a bug in my code that I've fixed since). When I started it again, krb5_rd_req has started returning ENOENT everytime I call it. I

Re: Looking up Kerberos error codes

2004-09-20 Thread Jelmer Vernooij
Hi, On Mon, Sep 20, 2004 at 06:35:19PM -0400, Jeffrey Hutzelman wrote about 'Re: Looking up Kerberos error codes': On Monday, September 20, 2004 21:42:21 + Jelmer Vernooij [EMAIL PROTECTED] wrote: Hi, Trying to get krb5 authentication working together with PostgreSQL, I stumbled

Re: Memory leaks in krb5?

2004-09-20 Thread Tom Yu
schommer == Derrick Schommer [EMAIL PROTECTED] writes: schommer Its only 28 blocks, but if I repeat the authentication over schommer and over it grows quickly. It seems that when I get a schommer forwarded tgt (krb5_fwd_tgt() ) and call krb5_rd_cred() it schommer allocates some memory in the