Re: A generic kerberizing project

2007-05-14 Thread Sam Hartman
> "Pete" == Pete Martin <[EMAIL PROTECTED]> writes: Pete> Sam, Apologies for sending to the wrong list - and thanks Pete> for the useful pointers. Pete> To answer your points, I'm not planning to use Kerberos Pete> solely to secure network traffic (authentication Pete> als

Re: pam_krb5: unable to get PAM_KRB5CCNAME, assuming non-Kerberos login

2007-05-14 Thread Russ Allbery
Adam Megacz <[EMAIL PROTECTED]> writes: > Can anybody tell me what this message means, and how to fix the problem > it appears to indicate? > May 13 17:46:52 goliath sshd[6468]: (pam_krb5): root: unable to get > PAM_KRB5CCNAME, assuming non-Kerberos login It means that the pam_krb5 auth stack

Re: Java GSSAPI Server Failure

2007-05-14 Thread
Thanks, but I just figured it out. Though DNS was correct (I checked it several times), a typo in /etc/hosts screwed this one up for me. I ended up using the java debugger to print out the name it thought it was looking for and noticed it didnt match. The error reporting from java on this is near

Re: Java GSSAPI Server Failure

2007-05-14 Thread Seema Malkani
Please check the service principal name that you pass as args[0] in your code. Here is an example: Oid krb5 = new Oid("1.2.840.113554.1.2.2"); // create a host based service name GSSName name = manager.createName("[EMAIL PROTECTED]", GSSName.NT_HOSTBASED_SERVICE, krb5); Seema