Disabling reverse dns lookups

2007-11-28 Thread Andrew Cobaugh
I've seen this discussed before, but I'm having some trouble. My situation is that I have sshd behind a NAT. The public IP has an A record from one of my domain names, but I have no control over the PTR record, as this is a cable modem connection, so the ISP controls that. So, the client goes to d

Looking for C program for kerberos work

2007-11-28 Thread Andrew Douglas Inman
I'm trying to hire a intermediate/senior c programmer to do work on kerberos with Steve Simmons.Additionally, some Sys. Admin, debugging and diagnostic work would be ideal (although that's a secondary criteria). There will be a diverse number of ongoing projects after the inital work is done as

New to Kerberos, please help

2007-11-28 Thread IDL
I have a messaging based application that runs on Websphere and a requirement has come up that it be integrated into Kerberos. So now i'm trying to learn what Kerberos is all about. I need to figure out how it can be done and also setup a test environment. 1) I assume I need to setup a KDC. Ca

Re: How to prevent hosts (clients) with no keytab from obtaining tickets

2007-11-28 Thread Ken Raeburn
On Nov 28, 2007, at 13:33, Steven Miller wrote: > I've set verify_ap_req_nofail in krb5.conf and hosts > without a keytab can still connect and obtain tickets. > Am I misunderstanding what this option does? It has nothing to do with getting tickets, as such, but figuring out whether to trust the

How to prevent hosts (clients) with no keytab from obtaining tickets

2007-11-28 Thread Steven Miller
I've set verify_ap_req_nofail in krb5.conf and hosts without a keytab can still connect and obtain tickets. Am I misunderstanding what this option does? thanks in advance, Steve Be a better sports nut!

Re: kprop: Software caused connection abort while reading response from server

2007-11-28 Thread Steve Devine
On Nov 27, 5:25 am, "Juri Dakua" <[EMAIL PROTECTED]> wrote: > Hello all, > > I am trying to configure a master KDC and a slave KDC. I am facing the > following problem while trying to do so. It will be of great help if > someone can kindly suggest me some solution. > > When I try to propagate the d

kpasswd: Message stream modified changing password

2007-11-28 Thread Francois Legrand
I have a "problem" with kerberos and I can't figure out what's going on. It's related to the command kpasswd. I run a MIT kerberos (Version: 1.4.4-5ubuntu3.3) on a ubuntu 7.04 server. The kdc and replica works well, but I have problems changing passwords. Here is what I do and the result is the