Re: Presence/absence of the keytab

2006-05-09 Thread Donn Cave
In article [EMAIL PROTECTED], Russ Allbery [EMAIL PROTECTED] wrote: ... The pam_krb5 modules that I've used either don't do this or only do this when the keytab is available, presumably doing a security vs. ease of deployment tradeoff. One difficulty is that if the authentication is not

Re: JAAS -Incorrect address format-Heimdal Kerberos

2006-05-09 Thread vpouli
Finally, I downloaded j2se 1.5 and I didn' t get that error of Incorrect address format. Authentication failed: java.lang.OutOfMemoryError But I got another error of null credentials from ticket cache and from the debugging I understood that my ticket cache was encrypted in

Re: Presence/absence of the keytab

2006-05-09 Thread Jeffrey Hutzelman
On Friday, May 05, 2006 09:17:34 PM -0700 Russ Allbery [EMAIL PROTECTED] wrote: One difficulty is that if the authentication is not being done as root, the PAM module needs something other than the host keytab to use for verification ... or a setuid-0 helper program.

kinit cannot resolve network address

2006-05-09 Thread Gwen Parker
I'm trying to configure a Solaris 8 system to authenticate Samba against Windows 2003 ADS. I've compiled the appropriate packages; however, I'm quickly stuck trying to get my kerberos ticket. Here's the error: sumac:/opt/local/kerberos5/bin# ./kinit [EMAIL PROTECTED] kinit(v5): Cannot

Re: kinit cannot resolve network address

2006-05-09 Thread Jeffrey Hutzelman
On Tuesday, May 09, 2006 03:49:35 PM -0400 Gwen Parker [EMAIL PROTECTED] wrote: [libdefaults] default_realm = dcri.duke.net [realms] dcri.duke.net = { # kdc = vmsodium.dcri.duke.net kdc = 10.0.101.65 } Kerberos realm names are case-sensitive.

Re: KFW 3.0, XP SP2, VMWare, and Principals with digits

2006-05-09 Thread Sam Hartman
Christopher == Christopher D Clausen [EMAIL PROTECTED] writes: Christopher I have known about this problem for months. It is Christopher apparently a known (at least to the KfW developers) Christopher bug. I was told that a beta that fixes this issue Christopher would be