Re: kadmind - SIGSEGV

2004-11-30 Thread Michael Tautschnig
No, this is unexpected. So what - are there any hints how to debug that issue? Is there any special information I should supply? One thing should be noted: I'm seeing these segfaults since the last update of the debian kerberos-packages (still, of course, that might be unrelated, if my database

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Alexandra Ellwood
On Nov 30, 2004, at 7:22 PM, Henry B. Hotz wrote: I just went back to a known-good krb5.conf from Jaguar; stripped out all the extraneous realm definitions; added the dns_fallback = no line; and retested. I can now get kerberos 4 tickets on Panther from an AFS kaserver. Obviously I missed so

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Sam Hartman
> "Jeremy" == Jeremy Allison <[EMAIL PROTECTED]> writes: Jeremy> Ok, I'm going to let off some steam here... :-) Jeremy> This is what drives me *nuts* about krb5 Jeremy> debugging for customers. WHY DOESN'T THE ERROR MESSAGE Jeremy> GIVE SOME DETAILS ABOUT WHAT IT IS TRYING

Re: kadmind - SIGSEGV

2004-11-30 Thread Sam Hartman
> "Michael" == Michael Tautschnig <[EMAIL PROTECTED]> writes: Michael> Hi all! For some reason my kerberos-admin-server Michael> segfaults repeatedly - are there any known issues? Michael> I'm running debian/sarge , thus krb5-1.3.4 . Michael> gdb reports that the segfaults o

Re: Where can I find the "WORKING" Kerberos client code?

2004-11-30 Thread Ken Raeburn
On Nov 30, 2004, at 08:20, Surendra Babu Ande wrote: Nice to meet you. I am Surendra from INDIA. We are planning to implement Kerberos Client for our Printer Network Interface card for pSOS+ environment. Our aim is to provide Client and Server authentication. Could you please give some pointers to

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Henry B. Hotz
I just went back to a known-good krb5.conf from Jaguar; stripped out all the extraneous realm definitions; added the dns_fallback = no line; and retested. I can now get kerberos 4 tickets on Panther from an AFS kaserver. Obviously I missed something. I will note that the code *still* doe

Re: Trust Relationship Issue

2004-11-30 Thread Luke Howard
>I've also noted that in certain documentation, it's necessary to create >user mappings from the windows domain to the kerberos domain, wich is >something that I don't want, because this envolves account duplication, >and I want to use one server or another to authenticate. Users from a MIT (non-

kadmind - SIGSEGV

2004-11-30 Thread Michael Tautschnig
Hi all! For some reason my kerberos-admin-server segfaults repeatedly - are there any known issues? I'm running debian/sarge , thus krb5-1.3.4 . gdb reports that the segfaults occur when doing mallopt - I didn't get any further with debugging yet... Would it be possible that my kerberos databas

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Jeremy Allison
Sam Hartman wrote: > login.krb5 is trying to write out the replay cache. Possibly, you > compiled login.krb5 on a system with /var/tmp but then ran it on a > system without that directory or something like that. > > You can use strace, truss or your appropriate os-specific tool to see > what file

Trust Relationship Issue

2004-11-30 Thread David Alexandre M. de Carvalho
Hi ! First of all I'd like to say that I've tried lot's of mailing lists (microsoft too, in fact I'm still waiting some addiitonal info), but the replies are contraditory, so I'm asking your help. I have a Mac os X server 10.3.6 with openldap set up and already with user accounts,and a kerberos RE

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Mark Hannessen
/var/tmp indeed didn't exist. creating this directory indeed fixed the problem. thanks a lot! Mark Hannessen On Tuesday 30 November 2004 18:22, you wrote: > login.krb5 is trying to write out the replay cache. Possibly, you > compiled login.krb5 on a system with /var/tmp but then ran it on a > s

Where can I find the "WORKING" Kerberos client code?

2004-11-30 Thread Surendra Babu Ande
Hello Kerberos Developers Team, Nice to meet you. I am Surendra from INDIA. We are planning to implement Kerberos Client for our Printer Network Interface card for pSOS+ environment. Our aim is to provide Client and Server authentication. Could you please give some pointers to implement the same

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Ken Raeburn
On Nov 30, 2004, at 12:22, Sam Hartman wrote: login.krb5 is trying to write out the replay cache. Possibly, you compiled login.krb5 on a system with /var/tmp but then ran it on a system without that directory or something like that. You can use strace, truss or your appropriate os-specific tool to

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Sam Hartman
login.krb5 is trying to write out the replay cache. Possibly, you compiled login.krb5 on a system with /var/tmp but then ran it on a system without that directory or something like that. You can use strace, truss or your appropriate os-specific tool to see what filename it is trying to open. ___

Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Mark Hannessen
I am pretty new to kerberos, and ran into some problems trying to configure it. I'll try to discribe my current situation as good as I can: I started with the following on the server: kdb5_util create -s kadmin.local -q "ktadd -k /kerberos/etc/krb5kdc/NL/LINUXNET/kadm5.keytab kadmin/admin kadmin

Re: authentification + ticket forwarding problem

2004-11-30 Thread Daniel Chénard
after debug it with ehtereal, It was a dns problem Le mardi 30 novembre 2004 Ã 10:49 -0500, Daniel ChÃnard a Ãcrit : > Hi! > > I'm new to using kerberos and I have a problem. > > I do a telnet -afx theServer > > and I get this answer: > "Negotiation of authentication, which is required for e

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Alexandra Ellwood
On Nov 30, 2004, at 4:25 AM, Henry B. Hotz wrote: Except for the environment variable thing that's exactly what I did. (I put the file in /Library/Preferences/edu.mit.Kerberos.) I didn't do it myself, but someone else was able to use a close relative of my krb5.conf file with RHEL 3. The kini

Re: Missing paper on kerberos vulnerability

2004-11-30 Thread Andreas Hasenack
On Fri, Nov 26, 2004 at 10:41:34AM +0200, Gilad Evrony wrote: > Hi, > Anyone know where to find (or has a copy of) the paper released two years > ago about the feasibility of brute-force attacks on Win2k kerberos? > The only link I found to the paper is: > http://www.brd.ie/papers/w2kkrb/feasibili

authentification + ticket forwarding problem

2004-11-30 Thread Daniel Chénard
Hi! I'm new to using kerberos and I have a problem. I do a telnet -afx theServer and I get this answer: "Negotiation of authentication, which is required for encryption, has failed. Good-bye." But, if i do this telnet -afx KDCServer I pass my authentification and I get my shell What's wron

kerberos in load balanced environment: host name/dns issue

2004-11-30 Thread Pitrich, Karl
Hi, we're using Apache mod_spnego with krb1.3.5 to fake M$ Integrated login to Windows clients from a Linux server environment. This works fine using single a single server. Now we're testing multiple loadbalanced webservers. To make such a setup work, we need to set each webserver's hostname to

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Henry B. Hotz
Except for the environment variable thing that's exactly what I did. (I put the file in /Library/Preferences/edu.mit.Kerberos.) I didn't do it myself, but someone else was able to use a close relative of my krb5.conf file with RHEL 3. The kinit command *required* the -4 option even though