AW: Accepting secure context on Server without KDC-Login

2006-09-11 Thread Olfmatic
Hello Seema, Sorry, but this is important to me. Let us make this clear: JDK 1.4.2: Specifying the keytab-file in the LoginModule will make it look there for credentials. But the TGT is obtained from the KDC when login() is called. JAVA5: Specifying the keytab-file in the LoginModule will make

is it safe to put KDC into DMZ?

2006-09-11 Thread Herbert Steininger
Hi, Just wanted to know if it is safe to put a KDC-Server into DMZ? TIA Herbert Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: is it safe to put KDC into DMZ?

2006-09-11 Thread Jeffrey Altman
Herbert Steininger wrote: Hi, Just wanted to know if it is safe to put a KDC-Server into DMZ? TIA Herbert Kerberos is designed to be the authentication service that clients will use to obtain access to the rest of the services within your infrastructure. As such it must be accessible to

Re: krb1.5 plugin interface query

2006-09-11 Thread Danny Mayer
Ken Raeburn wrote: Actually, Sam and I had an idea for a use for the KDC location plugin interface: You could use it for experimenting with new code to do the config-file or DNS lookups in different ways. Either for your own private use, without affecting other users, or as a way of

re: Kerberos fails to unwrap a jgss token - BUG-ID: 4868429

2006-09-11 Thread Bob Scheifler
does anybody know if there is a workaround for this bug? I am using jdk1.4.2_07. Since which JDK-Version has this bug been fixed? Is it possible to change some libraries without switching to JAVA 5 to get this bug fixed? (I had responded privately after someone forwarded the message to me,

Re: krb1.5 plugin interface query

2006-09-11 Thread Andrew Bartlett
On Fri, 2006-09-08 at 15:37 -0400, Ken Raeburn wrote: On Sep 8, 2006, at 11:58, Vipin Rathor wrote: As MIT_krb1.5 supports two plugin interfaces, one internal interface for new database layer and other public interface for KDC. here, can anyone tell me, 1.How i can use these

use of AES keys with kinit

2006-09-11 Thread Rich Frobose
I find that when I have a principal with both a DES key and an AES128 key then I cannot use kinit to authenticate using a keytab file that only has the AES128 key. I would like to know why I cannot authenticate through kinit using just my AES128 key. The details of my interaction follow: 1.

Re: use of AES keys with kinit

2006-09-11 Thread Ken Raeburn
On Sep 11, 2006, at 14:26, Rich Frobose wrote: I find that when I have a principal with both a DES key and an AES128 key then I cannot use kinit to authenticate using a keytab file that only has the AES128 key. I would like to know why I cannot authenticate through kinit using just my AES128

Re: use of AES keys with kinit

2006-09-11 Thread Tom Simons
On 9/11/06, Ken Raeburn [EMAIL PROTECTED] wrote: On Sep 11, 2006, at 14:26, Rich Frobose wrote: I find that when I have a principal with both a DES key and an AES128 key then I cannot use kinit to authenticate using a keytab file that only has the AES128 key. I would like to know why I