Re: Windows Clients Won't Do Kerberos

2006-06-30 Thread Markus Moeller
Mike, We have seen this issues too. A couple of our XP machines don't want to do Kerberos via HTP. If you use SP2 then there are Hotfixes available, but I don't recall the Hotfix number right now. Check with Microsoft Regards Markus Michael B Allen [EMAIL PROTECTED] wrote in message

Re: Windows Clients Won't Do Kerberos

2006-06-30 Thread Michael B Allen
On Fri, 30 Jun 2006 04:10:35 GMT Jeffrey Altman [EMAIL PROTECTED] wrote: Michael B Allen wrote: It could be (2). But it's not specific to IE because the wsh script generates the same error and it just uses the WinHttpRequest interface. So it would have to be an machine level or Global

Re: Windows Clients Won't Do Kerberos

2006-06-30 Thread Michael B Allen
On Fri, 30 Jun 2006 12:18:18 +1000 Luke Howard [EMAIL PROTECTED] wrote: So if *I* had to guess I would say it's (2). There's some mysterious security policy GPO or some odd MS thing I don't understand since I spend 90% of my time in vi :- Try cranking up KerbDebugLevel and see if you can

Re: Windows Clients Won't Do Kerberos

2006-06-30 Thread Markus Moeller
It overwrites the follwing patch http://support.microsoft.com/default.aspx?scid=kb;en-us;885887 which mentions Kerberos auth problems. Markus Markus Moeller [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The mentioned is hotfix is http://support.microsoft.com/?kbid=906524 and

No credentials cache found

2006-06-30 Thread Barbat, Calin
Hello, I'm using MIT Kerberos V as an SNC provider to a SAP system running under Linux. My current issue is a batch workprocess saying: GSS-API (min): No credentials cache found despite the fact that the /tmp directory is not full (55% free) and the file /tmp/krb5cc_UID is in place and has

Re: Windows Clients Won't Do Kerberos

2006-06-30 Thread Markus Moeller
The mentioned is hotfix is http://support.microsoft.com/?kbid=906524 and will be available in SP3. It updates the Kerberos dll and solved for us the issue. Could you let me know if this solved your problem ? Regards Markus Markus Moeller [EMAIL PROTECTED] wrote in message news:[EMAIL

RE: No credentials cache found

2006-06-30 Thread Barbat, Calin
I found out that the non-existant file to be opened is called /tmp/krb5cc_pdigits while the expected, working one, should be /tmp/krb5cc_UID. Perhaps it has something to do with PAM under Linux (SuSE) Calin Barbat Kerberos mailing list

Re: Is KRB5_CONFIG info cached?

2006-06-30 Thread Mike Friedman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 30 Jun 2006 at 01:39 (-0400), Marcus Watts wrote: I believe you're still barking up the wrong tree. The default realm is just that, a default. If you really want to specify two different realms, then that's fine -- that's why you can

Kerberos PAM help on Solaris 10

2006-06-30 Thread Erich Weiler
Hi All- I'm hoping some of you Sun Kerberos gurus can tell me if my problem can be resolved... Basically I have my test Solaris 10 system set up to authenticate, via PAM, in 3 ways. First it checks if you have a local account and then let's you in if so. Second it checks to see if you have a

krb5-1.5 is released

2006-06-30 Thread Tom Yu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The MIT Kerberos Team announces the availability of MIT Kerberos 5 Release 1.5. Please see below for a list of some major changes included, or consult the README file in the source tree for a more detailed list of significant changes. RETRIEVING