Re: Cross realm auth with MS Server 2003 and MIT kerb

2004-10-21 Thread Jeffrey Altman
BarBaar wrote: Hi, I found the following message on my w2k3 AD: 10/21/200411:48:35 AM KerberosError None3 N/A BART A Kerberos Error Message was received: on logon session Client Time: Server Time: 9:48:35. 10/21/2004 Z Error Code:

rsh under kerberos

2004-10-21 Thread
hello! I am setting up a PC cluster. But I met some problem about the rsh under kerberos. Would you like to help me? There are two cluster systems: 1) Redhat 9.0 (kernel 2.4.80) - old cluster system, working normally. 2) Fedora Core 2 (kernel 2.6.5) - new cluster system under building.

Kerberized telnetd: -a valid option eight char limit on account names

2004-10-21 Thread ROSS, Colin
While testing use of the Vintela.com product VAS, I found that I could not get the -a valid argument to telnetd to work. I had to regress to the position of removing the -a valid argument from telnetd, whilst using the -aFx arguments with the M$ telnet client. A pity because I hoped to make telnet

Re: Cross realm auth with MS Server 2003 and MIT kerb

2004-10-21 Thread Douglas E. Engert
BarBaar wrote: [EMAIL PROTECTED] (Douglas E. Engert) wrote in message news:[EMAIL PROTECTED]... So let me get this straight. You have two realms, TEST.NL (AD) and TEST2.NL MIT based. The user is [EMAIL PROTECTED] The workstation i.e. server in this case is XP box with pricipal host/[EMAIL

Re: Kerberized telnetd: -a valid option eight char limit on account

2004-10-21 Thread Jeffrey Altman
Which Microsoft telnet.exe are you using that supports Kerberos 5 authentication? As far as I am aware, the Microsoft telnet.exe only supports NTLM. Jeffrey Altman ROSS, Colin wrote: While testing use of the Vintela.com product VAS, I found that I could not get the -a valid argument to

Re: UNIX GSS-API / Windows SSPI :

2004-10-21 Thread Markus Moeller
Norbert Klasen wrote: --On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard wrote: How can I check this and, second question, how can I generate a keytab with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC crypto type: [- /]

Re: UNIX GSS-API / Windows SSPI :

2004-10-21 Thread Markus Moeller
Norbert Klasen wrote: --On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard wrote: How can I check this and, second question, how can I generate a keytab with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC crypto type: [- /]

Re: UNIX GSS-API / Windows SSPI :

2004-10-21 Thread Markus Moeller
Norbert Klasen wrote: --On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard wrote: How can I check this and, second question, how can I generate a keytab with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC crypto type: [- /]

Re: UNIX GSS-API / Windows SSPI :

2004-10-21 Thread Markus Moeller
Norbert Klasen wrote: --On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard wrote: How can I check this and, second question, how can I generate a keytab with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC crypto type: [- /]

User instances

2004-10-21 Thread Fredrik Tolf
I've got three short questions about instances: Is there a standardization for what instances mean for user principals? If not, would it be OK (OK as in not ugly) to enable users to create new principals with their own name, but different instances? If so, is there a way to make the MIT KDC allow

Re: Problem with auth via keytab w/ w2k3 KDC, works fine with w2k DC

2004-10-21 Thread Markus Moeller
Nathan Neulinger wrote: (Reposted from [EMAIL PROTECTED]) I've got a problem with keytabs related to an upgrade from W2K to W2K3 when authenticating from a unix client w/ mit krb5. Principal: host/[EMAIL PROTECTED] Password: (example) fred A) W2K DC create princ via ssl-ldap on w2k domain

Re: UNIX GSS-API / Windows SSPI :

2004-10-21 Thread Gmane
Sorry for the duplicate mails. My e-mail client hang and send it multiple times Markus Markus Moeller [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Norbert Klasen wrote: --On Freitag, 17. September 2004 20:35 + Jeffrey Altman [EMAIL PROTECTED] wrote: Jacques Lebastard

Re: Problem with auth via keytab w/ w2k3 KDC, works fine with w2k DC

2004-10-21 Thread Gmane
Nathan, I see now a similar problem. I am running for some time MIT 1.2.4 with a 2000 kdc. I now have to update to 2003 and noticed that I get decrypt integrety errors when using telnet. Everything else is the same (I use DESONLY, etc, ) Did you solve your issue ? How did you solve it ?