kfw-3.0-beta-2 is available

2005-11-30 Thread Tom Yu
-BEGIN PGP SIGNED MESSAGE- The MIT Kerberos Development Team is proud to announce a public beta of the next major revision of our Kerberos for Windows product, Version 3.0. Version 3.0 provides several often requested new features: * thread-safe Kerberos 5 libraries (provided by Kerberos

Re: Java GSS/Kerberos issue - Autheticating server

2005-11-30 Thread Douglas E. Engert
Laurence Brockman wrote: On 11/30/05, Douglas E. Engert <[EMAIL PROTECTED]> wrote: So you are using GSSAPI, and passing the GSSAPI tokens via soap betwen the clint and server. And the server accepts the authentication. Prior to the server even looking at the packet from the client, it

Re: Delegation using MIT client

2005-11-30 Thread Sam Hartman
krb5 1.2.7 had some issues with delegation depending on what encryption types are being used. In general we would recommend either talking to your OS vendor about the problem or upgrading. Kerberos mailing list Kerberos@mit.edu https://ma

Re: Java GSS/Kerberos issue - Autheticating server

2005-11-30 Thread Laurence Brockman
I can authenticate as that particular principal in the client portion of the code that I have written using exactly the same case, etc. I have a server and a client portion of code that pass GSS-wrapped kerberos tokens through a SOAP connection and the server is unable to authenticate to the KDC u

Delegation using MIT client

2005-11-30 Thread [EMAIL PROTECTED]
I am trying to do delegation using gssapi/MIT client. I am using Microsoft Kerberos and I have configured my UNIX boxes for the kerberos realm. I am able to make my application and service work in this environment. I have a requirement to make client credetials delegated to server for impersonation

Re: Java GSS/Kerberos issue - Autheticating server

2005-11-30 Thread Seema Malkani
Douglas E. Engert wrote On 11/30/05 08:27,: Laurence wrote: Hey guys, hopefully someone can help me out here. I am having a problem with authenticating a user to a KDC (I believe the MIT reference implementation) using Java (JDK1.5 and JDK1.4) through GSS. Here is the background: I have t

Re: Java GSS/Kerberos issue - Autheticating server

2005-11-30 Thread Douglas E. Engert
Laurence Brockman wrote: I can authenticate as that particular principal in the client portion of the code that I have written using exactly the same case, etc. I have a server and a client portion of code that pass GSS-wrapped kerberos tokens through a SOAP connection So you are using GSS

Telnet authentication problem

2005-11-30 Thread Inger, Slav \(.\)
Hello, Having an issue getting telnetd and telnet to work together to enable single sign-on. Have the latest MIT Kerberos distribution, compiled and running on Debian Linux. Can get TGTs, gss-client/gss-server are working fine, and I can get single sign-on with rlogin/klogind. But not with teln

Re: Java GSS/Kerberos issue - Autheticating server

2005-11-30 Thread Douglas E. Engert
Laurence wrote: Hey guys, hopefully someone can help me out here. I am having a problem with authenticating a user to a KDC (I believe the MIT reference implementation) using Java (JDK1.5 and JDK1.4) through GSS. Here is the background: I have two processes running on one machine (Client an

Re: getent

2005-11-30 Thread Nicholas A. Suppiah
Hi Bjorn, Winbind is running nsc is stopped and klist -5 shows the ticket last till tomorrow. == begin klist -5 === Default principal: [EMAIL PROTECTED] Valid starting ExpiresService principal 11/29/05 10:44:27 11/29/05 20:43:12 krbtgt/my.domain.my renew until 11/30/05