Re: kfw-3.0 can't obtain tickets from heimdal kdc 0.7.1(Bad address

2005-12-15 Thread jay alvarez
Jeffrey Altman <[EMAIL PROTECTED]> wrote: Both of the Heimdal KDCs I have access to work fine but I do not know what version of Heimdal they are using. Before, I use to have a heimdal-0.6.x + Leash ticket manager(kfw2.6.5) and it is working fine also. NetIdMgr will not request a ticket us

Re: kinit locking up

2005-12-15 Thread Ken Raeburn
On Dec 15, 2005, at 3:04, I wrote: So now we have another library being loaded somewhere along the way which causes the pthread library to be loaded (libnss_ldap -> libldap_r -> libpthread, on my system), and the Kerberos library is calling pthread_mutex_lock on a structure which it hasn't

Re: java 1.5 KINIT error

2005-12-15 Thread Russ Allbery
FM <[EMAIL PROTECTED]> writes: > I'm trying to use kinit with kerberos but : >> bin/kinit [EMAIL PROTECTED] > Password for [EMAIL PROTECTED]:password > Exception: krb_error 31 Integrity check on decrypted field failed (31) > Integrity check on decrypted field failed > KrbException: Integrity che

help!!

2005-12-15 Thread yinenlai
Hi, now i do mail client development,i want to add kerberos authentication,i want to know how to connect mail server which support kerberos authentication, which mail servers support kerberos authentication, or how can i set up mail server environment. besides, i work on windows 2K.i user po

java 1.5 KINIT error

2005-12-15 Thread FM
Hello, I'm trying to use kinit with kerberos but : > bin/kinit [EMAIL PROTECTED] Password for [EMAIL PROTECTED]:password Exception: krb_error 31 Integrity check on decrypted field failed (31) Integrity check on decrypted field failed KrbException: Integrity check on decrypted field failed (31)

How to create a username and password at KDC for User Auth

2005-12-15 Thread Surendra Babu A
Hi, Thanks a lot for the information so far. One more question: I am using Linux KDC server. How to create a login name and password to get authentication? I need to use knit command somewhere? At what location should I use and how should i use? #1. If I want to create "aa" as login name and

Re: kadmin question

2005-12-15 Thread Huub
Dieter Schicker wrote: > Huub wrote: > >> Dieter Schicker wrote: >> >>> Huub wrote: >>> Hi, I'm setting up a kerberos/heimdal server and according to the steps I'm following I have to do this: kadmin -p alice/admin kadmin> add --random-key host/hostname.exampl

Re: kadmin question

2005-12-15 Thread Dieter Schicker
Huub wrote: > Dieter Schicker wrote: >> Huub wrote: >> >>> Hi, >>> >>> I'm setting up a kerberos/heimdal server and according to the steps >>> I'm following I have to do this: >>> >>> kadmin -p alice/admin >>> kadmin> add --random-key host/hostname.example.com >>> kadmin> ext keytab -k /tmp/krb

Re: kadmin question

2005-12-15 Thread Huub
Dieter Schicker wrote: > Huub wrote: > >> Hi, >> >> I'm setting up a kerberos/heimdal server and according to the steps >> I'm following I have to do this: >> >> kadmin -p alice/admin >> kadmin> add --random-key host/hostname.example.com >> kadmin> ext keytab -k /tmp/krb5.keytab-hostname >> h

Re: kinit locking up

2005-12-15 Thread Russ Allbery
Jon DeVree <[EMAIL PROTECTED]> writes: > On Wed, Dec 14, 2005 at 11:02:50PM -0800, Russ Allbery wrote: >> Okay, getting closer. What SASL modules do you have installed? In >> particular, do you have any GSSAPI SASL modules installed? > Just libsasl2 package because the ldap packages in Debian d

Re: How to create a username and password at KDC for User Auth

2005-12-15 Thread Douglas E. Engert
Surendra Babu A wrote: Hi, Thanks a lot for the information so far. One more question: I am using Linux KDC server. How to create a login name and password to get authentication? I need to use knit command somewhere? At what location should I use and how should i use? #1. If I want to cre

Re: kfw-3.0 can't obtain tickets from heimdal kdc 0.7.1(Bad address

2005-12-15 Thread Jeffrey Altman
Both of the Heimdal KDCs I have access to work fine but I do not know what version of Heimdal they are using. NetIdMgr will not request a ticket using addresses. An "incorrect net address" error should mean that the addresses within the ticket do not correspond to any of the addresses listed in

Re: kinit locking up

2005-12-15 Thread Jon DeVree
On Wed, Dec 14, 2005 at 11:02:50PM -0800, Russ Allbery wrote: > Okay, getting closer. What SASL modules do you have installed? In > particular, do you have any GSSAPI SASL modules installed? Just libsasl2 package because the ldap packages in Debian depend on it. libsasl2-modules is not installed

kfw-3.0 can't obtain tickets from heimdal kdc 0.7.1(Bad address list requested)

2005-12-15 Thread jay alvarez
Ok, here's what I did: I am trying to setup a kdc server for mixed unix and windows clients. I have a working kdc setup using heimdal 0.7.1. My workstation is a unix machine (freebsd) dual boots with windows 2000. While on unix, I can obtain tickets using kinit. Then I rebooted my workst

Re: kinit locking up

2005-12-15 Thread Ken Raeburn
On Dec 14, 2005, at 22:39, Russ Allbery wrote: Below is the interesting bit. valgrind at least thinks that the mutexes aren't fully initialized, it looks like, before they're passed into the pthread functions. Note that I don't get these same errors when I run valgrind against the kinit in

Re: kinit locking up

2005-12-15 Thread Russ Allbery
Jon DeVree <[EMAIL PROTECTED]> writes: > On Wed, Dec 14, 2005 at 07:39:56PM -0800, Russ Allbery wrote: >> One thing that I did notice was a bunch of SASL calls earlier on. I >> think the invalid reads there are probably just the standard ld.so >> noise that doesn't appear to mean anything, but th