Re: kinit locking up

2005-12-14 Thread Jon DeVree
On Wed, Dec 14, 2005 at 07:39:56PM -0800, Russ Allbery wrote: > One thing that I did notice was a bunch of SASL calls earlier on. I think > the invalid reads there are probably just the standard ld.so noise that > doesn't appear to mean anything, but their presence indicates that you're > using so

Re: ssh-gssapi fails when user have "instance " part

2005-12-14 Thread Russ Allbery
jay alvarez <[EMAIL PROTECTED]> writes: > I created a user with an instance "mis" > jay/[EMAIL PROTECTED] > and tried ssh'ing to one machine configured to accept gssapi ssh > authentication, however, to my surprise, gssapi authentication > failed. Is there a .k5login file in jay's hom

ssh-gssapi fails when user have "instance " part

2005-12-14 Thread jay alvarez
Hi, I created a user with an instance "mis" jay/[EMAIL PROTECTED] and tried ssh'ing to one machine configured to accept gssapi ssh authentication, however, to my surprise, gssapi authentication failed. Now what I did was to create another principal, this time removing the instance "mis"

Re: kinit locking up

2005-12-14 Thread Russ Allbery
Jon DeVree <[EMAIL PROTECTED]> writes: > Attached is the output from valgrind. Below is the interesting bit. valgrind at least thinks that the mutexes aren't fully initialized, it looks like, before they're passed into the pthread functions. Note that I don't get these same errors when I run va

Re: Kerberos MIT - Windows clients

2005-12-14 Thread Dieter Schicker
Dieter Schicker wrote: > Hi, > > I have a LDAP/GSSAPI/Kerberos system up and running. I have 2 questions: > > 1. In the moment this system does only authentication. But what I want > is that "somewhere in this system" I can define to which of our servers > the specific user has access. Clearly,

Re: kinit locking up

2005-12-14 Thread Jon DeVree
Attached is the output from valgrind. -- Jon "Only in the tales that humans tell do the hunters kill the wolves in the end." -- Jin-Roh ==16877== Memcheck, a memory error detector. ==16877== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al. ==16877== Using LibVEX rev 1471, a librar

Re: kadmin question

2005-12-14 Thread Dieter Schicker
Huub wrote: > Hi, > > I'm setting up a kerberos/heimdal server and according to the steps I'm > following I have to do this: > > kadmin -p alice/admin > kadmin> add --random-key host/hostname.example.com > kadmin> ext keytab -k /tmp/krb5.keytab-hostname > host/hostname.example.com > > My qu

How to check the validity of krb5.conf and keytab file ????

2005-12-14 Thread sandypossible
Hi all, I am working on implementing MIT based kerberos for an embedded device. I am looking in to how to check the contents of the conf and keytab file before puttting in to say "/etc" directory? Basically I want to check if all the entries in the conf and keytab file are valid. How can I do i

old segfault

2005-12-14 Thread Andreas
Reference: http://diswww.mit.edu/menelaus.mit.edu/kerberos/24144 - Forwarded message from Nathan Herring <[EMAIL PROTECTED]> - Subject: RE: [Ipsec-tools-devel] IPSec with Racoon and Kerberos working still have some questions. From: Nathan Herring <[EMAIL PROTECTED]> To: sand