Regarding IBM's release of kadmin GUI for Kerberos

2007-04-30 Thread Shraddha Karwan
Hi , I just noticed that IBM has released an kadmin GUI for Kerberos ( based on latest Eclipse , SWT framework) in its alphawork offering ( looks free for usage) and it seems to work with MIT KDC server as well. I like the SWT way as it gives me the look n feel of my OS. URL: *http://www.alphawor

Re: Lots of UNKNOWN_SERVER this time... whoa

2007-04-30 Thread Jeff Blaine
I think I see part of the problem, and don't know who is to "blame" for it. The command 'kdb5_util create -r RCF.FOO.COM -s' created krbtgt/[EMAIL PROTECTED] The authentication process is trying to find krbtgt/[EMAIL PROTECTED] which does not exist. Is kdb5_util creating an improperly named krbt

Re: Lots of UNKNOWN_SERVER this time... whoa

2007-04-30 Thread Ken Hornstein
>The authentication process is trying to find >krbtgt/[EMAIL PROTECTED] which does not exist. > >Is kdb5_util creating an improperly named krbtgt principal >or is RHELv4 pam_krb5.so improperly naming its requested >principal (lowercasing it)? As a guess, I believe that pam_krb5.so thinks that it n

Re: Lots of UNKNOWN_SERVER this time... whoa

2007-04-30 Thread Jeff Blaine
I believe I am chalking this (original reported issue) up to a broken sshd_config, believe it or not. All of the crazy UNKNOWN_SERVER errors are gone. UsePAM was yes, ChallengeResponseAuthentication was "no" so no PAM auth was being used. Don't ask me how, but I was getting in somehow and gettin