Re: pam_krb5 against w2k3 very slow?

2005-04-18 Thread Dave
>Hi, > > >we connected a linux box with w2k3 and installed pam_krb5 for >sshd. In >principle it works but it takes about 10sec to authenticate?! The >servers work in a test environment means basically no load. >The krb5 installation is heimdal 0.61 but I dont know if this >really >has do with the p

Re: encrypted types not supported

2005-04-18 Thread Markus Moeller
Or use commercial products from Wedgetail/Vintela. Markus "Seema Malkani" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > For Java application to authenticate against Windows KDC, you will need > configure the Windows 2000 KDC to use DES. Select "use DES encryption" > in the Active

Re: encrypted types not supported

2005-04-18 Thread Seema Malkani
For Java application to authenticate against Windows KDC, you will need configure the Windows 2000 KDC to use DES. Select "use DES encryption" in the Active Directory account settings, and reset the password. Seema ted_trippin wrote: >Hi, > >I have a little java app that can authenticate against

Reading KDCs from DNS (multiple domain controlers and KDCs)

2005-04-18 Thread Pawe?
I need to support configuration with many Domain Controlers. I found that I can enter many KDCs in krb5.conf file f.e.: [realms] XYZ.INTERNAL.COM = { kdc = s1.xyz.internal.com:88 kdc = s2.xyz.internal.com:88 } Is it correct ? I've heard that it is possible to read all domai

help:Is there any kerberos version of ssh

2005-04-18 Thread 张浩
Hello ! Is there any kerberos version of ssh ? When i config the /etc/ssh/sshd_config which is sshd's config file,there are some options as follows: # Kerberos options # KerberosAuthentication automatically enabled if keyfile exists #KerberosAuthentication yes #KerberosOrLocalPasswd yes #Kerbero

Re: Reading KDCs from DNS (multiple domain controlers and KDCs)

2005-04-18 Thread Jeffrey Altman
Pawe? wrote: > I need to support configuration with many Domain Controlers. I found > that I can enter many KDCs in krb5.conf file f.e.: > [realms] > XYZ.INTERNAL.COM = { > kdc = s1.xyz.internal.com:88 > kdc = s2.xyz.internal.com:88 > } > Is it correct ? This is correct but does