Re: kpasswd not working against w2k3 sp1 kerberos server

Vandeir Eduardo wrote: > It's really weird. When I do a kinit and after a klist, look at > the Expires. It's shows 12/31/69. It could this be the > cause? At windows, maximum lifetime for user ticket is 10 hours. > > [EMAIL PROTECTED] krb5-1.4.1]# /usr/local/krb5/bin/kinit dito > Password for [EM

Assertion failed w/krb5-1.4.1 on FreeBSD-5.3

I recently installed a new FreeBSD-5.3 system designed to function as a master KDC. I then built and installed krb5-1.4.1. Initially, I ran ./configure with: --enable-shared --enable-static --without-krb4 After installation, I could not run krb5kdc due to a failed assertion. A bit of googli

Multiple realms

Do multiple realms require multiple kdc's and if so, does that mean I will need to have multiple ports open for those if the KDCs all exist on the same machine? I realize I will need to do cross realm with this setup but that should be trivial by setting up the trust in the KDC. Are there any i

Re: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 (fwd)

Doing a "make distclean", then setting krb5_cv_func_res_nsearch=no in config.cache prior to running configure might help. This will force configure to think that res_nsearch() is not present, thus preventing res_ninit() and related functions from being called in dnsglue.c. ---Tom __

krb5 list of exported native APIs

Hi All, From where can i get the complete list of exported native kerberos APIs. thnx in advance Prashant == Prashant Sodhiya S/w Developer NAS(DCE) Team IBM Global Services India Pvt Ltd 'Shaheen' S-1-M ,ShankerSeth Road Pune - 411 001 e-mail: [EMAIL PRO

Smartard logon with XP

Hi, I just found your email on a 1 year old thread at mailman.mit.edu. I wanted to know whether you had figured out an XP/non domain solution. So far the only way I found to get a "card insertion event" is to launch a timer: the point for me being to offer smart card PC protection for non-netw

Re: Kerberos Digest, Vol 28, Issue 32

Milton hasn't had a chance to get back to the list on this -- but the problem is most likley that the overrun isn't 70 some bytes, it is more than 730 bytes -- I'd make the pad 800 bytes at least --- I haven't looked, but this same call may be made elsewhere as well... Harry On Wed, 27

kpasswd not working against w2k3 sp1 kerberos server

Hi, I always used kpasswd to change password against a w2k3 kerberos server. But after installed sp1, it doesn't work anymore. This is the error: [EMAIL PROTECTED] krb5-1.4.1]# /usr/local/krb5/bin/kpasswd dito Password for [EMAIL PROTECTED]: Enter new password: Enter it again: /usr/local/kr

RE: Kerberos Digest, Vol 28, Issue 32

My mistake. I went and rechecked my work and made an error commenting out the original line of code. Option #1 - Compiled successfully with C for AIX and AIX make; but reported the same error. Option #2 - Same as option #1. It compiles with no errors; but still returns: kinit(v5): Cannot reso

Re: AD Cross Realm Trust Integration

Greetings again, > > Windows server support for cross realm trusts using RC4 keys was added > to 2003 SP1. When you are ready to install it, you can upgrade your > cross realm keys to RC4. Gotcha...I was hoping this would be the case. Now if I can only convince the 800 departments on campus