Wrong principal in request using virt interface

2007-01-29 Thread petesea
I'm currently using openssh-4.3p2 compiled with krb5-1.4.4 and the GSSAPI Key Exchange patch (gsskex-20060223). On my current system this works fine. I'm moving the server to a new cluster of RHE hosts that use virtual interfaces (eg. eth0:1) to allow for failover to a new host while still

Re: Printing and Kerberos

2007-01-29 Thread Andreas Hasenack
On Mon, Jan 29, 2007 at 07:11:17PM +, Nuno Rodrigues wrote: Hi, I was trying to setup a print server with kerberos authentication. I tried to use LPRng, but it doesn't solve my problem. It has some security problems. So I was wondering if anyone has a print server which has kerberos

Re: Wrong principal in request using virt interface

2007-01-29 Thread petesea
On Mon, 29 Jan 2007, Christopher D. Clausen wrote: [EMAIL PROTECTED] wrote: I'm moving the server to a new cluster of RHE hosts that use virtual interfaces (eg. eth0:1) to allow for failover to a new host while still maintaining the original IP address. On this new system I'm getting

Re: Wrong principal in request using virt interface

2007-01-29 Thread Christopher D. Clausen
[EMAIL PROTECTED] wrote: On Mon, 29 Jan 2007, Christopher D. Clausen wrote: Can you simply fail-over using the same IP on both interfaces? (I believe there is a bonding module in Linux that can do this.) The point of the virt interface is so it can be moved to a different host. If the virt

Re: Wrong principal in request using virt interface

2007-01-29 Thread Christopher D. Clausen
[EMAIL PROTECTED] wrote: On Mon, 29 Jan 2007, Christopher D. Clausen wrote: [EMAIL PROTECTED] wrote: I'm moving the server to a new cluster of RHE hosts that use virtual interfaces (eg. eth0:1) to allow for failover to a new host while still maintaining the original IP address. On this new

Re: Printing and Kerberos

2007-01-29 Thread Nuno Rodrigues
Thanks for the tip Andreas. It looks like the guys from CUPS are developing the Kerberos Plugin. I'll just have to wait a bit for a more stable release On 1/29/07, Andreas Hasenack [EMAIL PROTECTED] wrote: On Mon, Jan 29, 2007 at 07:11:17PM +, Nuno Rodrigues wrote: Hi, I was trying to

Re: Wrong principal in request using virt interface

2007-01-29 Thread Edward Murrell
[EMAIL PROTECTED] wrote: Sorry, I guess I wasn't very clear. The servers aren't KDCs, they are CVS/Subversion servers accessed via OpenSSH using GSSAPI Authentication and GSSAPI Key Exchange. In the very simplest case we would have 2 hosts -- one for CVS and one for Subversion. If one

Re: Compiling krb5-1.6 for Windows

2007-01-29 Thread Danny Mayer
Peger, Daniel Heinrich wrote: Hi, following the instructions in the README I tried to create the Kerberos sources for compilation on a Windows platform. That is I did path_to_krb5/krb5-1.6/src ./configure make -f Makefile.in kerbsrc.zip make does some awk stuff but then exits

RE: Compiling krb5-1.6 for Windows

2007-01-29 Thread Peger, Daniel Heinrich
Hi, Yes the build environment for KfW is pretty badly broken at least the 3.0 environment which is what I ended up building (using VS 2005). Acutally i'm not trying too compile KfW but Kerberos itself. Is this possible at all on a Windows platform? I wrote extensive notes on this just to get