Re: obtaining multiple tickets

2008-02-12 Thread Jeffrey Altman
You need to use multiple credential caches. Change the value of the KRB5CCNAME environment variable to refer to the new ccache location and then execute kinit, klist, etc. David Bear wrote: I'm rather ignorant about most things kerberos, so I apologize if this is a stupid question. I regularl

obtaining multiple tickets

2008-02-12 Thread David Bear
I'm rather ignorant about most things kerberos, so I apologize if this is a stupid question. I regularly get tokens in my asu.edu realm. How would I kinit a second set of tickets for another realm without clobbering my first set? If I klist my credentials, then kinit a second set, then kilist,

Re: sso problems

2008-02-12 Thread Richard E. Silverman
> > hello folks, > i have gone through the mail archive for suggestions but i can't seem > to make headway. i am not sure what i am missing. am i supposed to > export contents of krb5.keytab and copy them to the client systems? > i can't even log on to the kerb server. the ssh session just drop

Re: Kerberized authorization service

2008-02-12 Thread Anne & Lynn Wheeler
Ken Hornstein <[EMAIL PROTECTED]> writes: > You know, I never liked the term "roles". It's a "hot" term in the > theoretical world, but I guess I never see a practical use of it when > we get down to actually assigning rights to people. To me the easier > concept is ACL - that's something that j

single sign on woes

2008-02-12 Thread john smith
hello folks, i have gone through the mail archive for suggestions but i can't seem to make headway. i am not sure what i am missing. am i supposed to export contents of krb5.keytab and copy them to the client systems? i can't even log on to the kerb server. the ssh session just drops to the cons

Re: Kerberized authorization service

2008-02-12 Thread Ken Hornstein
First off, let me explain my perspective. My background has always been from a engineering perspective. I look at a concept and I immediately think, "How would I implement that?" "How would I use that?" If I can't answer those questions, then I have a problem with the concept, because I've seen

sso problems

2008-02-12 Thread john smith
hello folks, i have gone through the mail archive for suggestions but i can't seem to make headway. i am not sure what i am missing. am i supposed to export contents of krb5.keytab and copy them to the client systems? i can't even log on to the kerb server. the ssh session just drops to the con

reappearence of bug #5394 krb5-1.6: segfault on password change?

2008-02-12 Thread Steven Miller
I'm running 1.6.3 with an openldap backend 2.4.6. Changing a password with no policy works, however if a policy is assigned to the principal, kadmin.local and kadmin segfault. Any ideas? Thanks, Steven Be

Ubuntu and ldap backend

2008-02-12 Thread hiroshi
Hi, I'm trying to configure MIT kerberos with ldap backend as principal database on ubuntu 7.10, following instruction in admin-guide of MIT, but I stuck because I cannot find kdb5_ldap_util in ubuntu packages (and I have to do this using packages). So, I'd like to know, is there a way to bypass th

PAM.CONF

2008-02-12 Thread Andrea
I finally got SSO with Kerberos working on a Solaris 9, but now I have some problem on setting the correct pam.conf. My goal is to authenticate with Kerberos or LDAP or Passwd in this order, anyone has a working fine pam.conf for this setting. Thx in advance _

Re: Kerberized authorization service

2008-02-12 Thread g . w
On Feb 11, 9:48am, Ken Hornstein wrote: } Subject: Re: Kerberized authorization service Good evening, I hope the week has started well for everyone. My apologies for the somewhat high latency on responses. I'm answering e-mails at night since I'm spending the days skiing the back bowls at Vail.