Solaris 8 and mit kdc

2005-07-05 Thread Manel Euro
Thank you for your emails. I have been out of the office. I will try the advices as soon as I get back. Thank you, M. fsoliv wrote: Before typing this command I do kinit -f username. Also, i can't find a field in seam's krb5.conf file to configure the location of the keytabs. I have place

Re: Updating encryption types

2005-07-05 Thread Phil Dibowitz
On Mon, Jul 04, 2005 at 03:29:11PM -0500, Will Fiveash wrote: > > 1. Changing the enctypes (the previous admin had it hard coded) will cause > > session keys to use the new enctypes, but other keys will not immediately > > see > > effect. > > If you mean creating a new set of enctype keys for ser

Problems with Keytabs

2005-07-05 Thread js1
I get the following message when I run "kinit -k -t my.keytab": kinit(v5): Cannot find KDC for requested realm while getting initial credentials It works fine if I just do "kinit my_user". I did a tcpdump and noticed that when I try to use the keytab, kinit seems to look for _kerberos._udp.L

Re: Problems with Keytabs

2005-07-05 Thread Ken Raeburn
On Jul 5, 2005, at 18:14, js1 wrote: I get the following message when I run "kinit -k -t my.keytab": kinit(v5): Cannot find KDC for requested realm while getting initial credentials It works fine if I just do "kinit my_user". I did a tcpdump and noticed that when I try to use the keytab,

Need some tips on kerberizing our ENTIRE network

2005-07-05 Thread jay alvarez
Good day, We had a meeting last time regarding the need for a centralized authentication in our agency. Everyone except me, was looking into using an ldap directory. I insist on them that if we were to use ldap for sole authentication purpose, ldap was not designed for it, and we should be consi

Re: Need some tips on kerberizing our ENTIRE network

2005-07-05 Thread Russ Allbery
jay alvarez <[EMAIL PROTECTED]> writes: > jabberd2 (by just looking at its config file, it > definitely supports ldap, not sure with kerberos) How to do GSSAPI is part of the Jabber protocol, but is not implemented by any of the servers or clients so far as I know. > Nagios server monitoring(I'v

Re: Need some tips on kerberizing our ENTIRE network

2005-07-05 Thread Mark Campbell
When you ask about nagios support are you asking about authentication to the nagios interface or monitoring a KDC? If you asking about monitoring I have written a plug in for nagios that monitors our KDCs here. I am sure I could share. Mark jay alvarez wrote: Good day, We had a meeting

Re: Need some tips on kerberizing our ENTIRE network

2005-07-05 Thread jay alvarez
--- Mark Campbell <[EMAIL PROTECTED]> wrote: > When you ask about nagios support are you asking > about authentication to I'm referring to nagios authentication of restricted pages, but it's more of webserver/browser negotiation problem as others have already mentioned. > the nagios interface