Re: Kerberos ftpd and large file support

2005-04-01 Thread Константин Кунщиков
Hello! You can use SEAM ftpd included in SUN's Solaris distribution before 10 or standard ftpd included in Solaris 10. Best regards, Konstantin. Hi, I need to use the Kerberos implementation of the ftpd on Solaris SPARC 64bit platform for transfer of large files ( 2GB). I tryed with ftpd from

domain realm mapping

2005-04-01 Thread Preetam Ramakrishna
Hi, On unix machines, the kerberized client (eg: telnet) look for domain realm mappings in the /etc/krb5.conf file. So, when I run telnet server-1.acme.com, the client would appropriately request the KDC a service ticket for host/[EMAIL PROTECTED] Is there anything equivalent

Re: domain realm mapping

2005-04-01 Thread Douglas E. Engert
Preetam Ramakrishna wrote: Hi, On unix machines, the kerberized client (eg: telnet) look for domain realm mappings in the /etc/krb5.conf file. So, when I run telnet server-1.acme.com, the client would appropriately request the KDC a service ticket for host/[EMAIL PROTECTED] Is

AIX 5.1 and Network Authentication Service 1.3

2005-04-01 Thread Matthew B. Brookover
I have MIT Kerberos 1.4 KDC on a Linux (Fedora Core 3) server. The server works with Linux, Windows, and open LDAP. I am trying to get an RS/6000 running AIX 5.1 with IBM's kerberos client (Network Authentication Service 1.3) to work with the KDC on Linux. I ran mkkrb5clnt -c

Re: AIX 5.1 and Network Authentication Service 1.3

2005-04-01 Thread Markus Moeller
Matthew If I remember right you need DCE installed AIX 5.1. Only from AIX 5.2 you can use client/server without DCE. I think you also need to run chauthent -krb5 -std. Regards Markus Matthew B. Brookover [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have MIT Kerberos 1.4 KDC on

Re: Kerberos ftpd and large file support

2005-04-01 Thread Markus Moeller
Vladimir, I am the owner of gssmod and I tested it on Solaris 8 sparc only as I didn't have a sparc64 machine. The module relies on proftpd to handle the file open and reads/writes, which supports files 2GB. If it works on sparc64 you would need to check with the proftpd owner

RE: Unable to Authenticate some users...

2005-04-01 Thread Tim Alsop
Garry, Can you provide me with some more details ? E.g. is your architecture where you logon to Windows domain, then use a Kerberos enabled telnet product to telnet onto the CISCO device (CISCO device running telnetd with kerberos support) ? If not, please explain how you have this implemented -

Java sample for SSO using JAAS on XP SP2, did anybody get it to work?

2005-04-01 Thread Bajpai, Atul
Hi all, I am using a JAAS sample to try SSO on windows. My problem is When I use the Krb5LoginModule I am always prompted for a username and password. I want my app to get the kerberos ticket for the currently logged in user (which is me) without being prompted for username/password. To understand

Re: AIX 5.1 and Network Authentication Service 1.3

2005-04-01 Thread Christopher D. Clausen
Matthew B. Brookover [EMAIL PROTECTED] wrote: I have MIT Kerberos 1.4 KDC on a Linux (Fedora Core 3) server. The server works with Linux, Windows, and open LDAP. I am trying to get an RS/6000 running AIX 5.1 with IBM's kerberos client (Network Authentication Service 1.3) to work with the KDC on

Re: Solaris 9 Cross Realm Authentication Problems

2005-04-01 Thread Jeffrey Hutzelman
On Friday, April 01, 2005 07:23:37 PM -0800 Darren Hoch [EMAIL PROTECTED] wrote: kadmin: lisprincs snip krbtgt/[EMAIL PROTECTED] krbtgt/[EMAIL PROTECTED] krbtgt/[EMAIL PROTECTED] The second components of each of these principal names must exactly match the name of the realm involved, including

Re: Solaris 9 Cross Realm Authentication Problems

2005-04-01 Thread Darren Hoch
Hello All, Thanks Jeffery. I deleted the old krbtgt principals and added the following on each host: krbtgt/[EMAIL PROTECTED] krbtgt/[EMAIL PROTECTED] I am almost there. When user darren now tries to telnet (kerberized) from a host in realm EXAMPLE.COM to a host in EXAMPLE1.COM, the