kadmin.local segfault gdb output

2008-02-13 Thread Steven Miller
I am running krb5 with an openldap backend. When attempting cpw on a principal with a policy, the program segfaults. If the principal does not have a policy cpw works. getprinc on a principal with a policy results in a segfault as well. I am including the gdb output, but confess I am not a

Re: kadmin.local segfault gdb output

2008-02-13 Thread Ken Raeburn
On Feb 13, 2008, at 11:16, Steven Miller wrote: I am running krb5 with an openldap backend. When attempting cpw on a principal with a policy, the program segfaults. If the principal does not have a policy cpw works. getprinc on a principal with a policy results in a segfault as well. I am

Re: Ubuntu and ldap backend

2008-02-13 Thread Ken Raeburn
On Feb 12, 2008, at 10:00, hiroshi wrote: Hi, I'm trying to configure MIT kerberos with ldap backend as principal database on ubuntu 7.10, following instruction in admin-guide of MIT, but I stuck because I cannot find kdb5_ldap_util in ubuntu packages (and I have to do this using

Re: kadmin.local segfault gdb output (output from backtrace)

2008-02-13 Thread Steven Miller
Note: forwarded message attached. Looking for last minute shopping deals? Find them fast with Yahoo! Search.

kadmin.local segfault gdb output (output from backtrace)

2008-02-13 Thread Steven Miller
(gdb) backtrace #0 0x00184dac in memcpy () from /lib/tls/libc.so.6 #1 0x00f372b3 in krb5_dbekd_decrypt_key_data (context=0x9fb21e8, mkey=0x6179f8, key_data=0x9fe0058, dbkey=0xbff22fb0, keysalt=0xbff22fa0) at decrypt_key.c:127 #2 0x00604f6c in create_history_entry (context=0x9fb21e8,

Re: kadmin.local segfault gdb output (output from backtrace)

2008-02-13 Thread Ken Raeburn
On Feb 13, 2008, at 12:22, Steven Miller wrote: Note: forwarded message attached. Attachments get stripped out on this mailing list unless they have one of a specific set of MIME types. I just added message/rfc822 (which is what I assume your mail probably used) to that set. -- Ken

wallet 0.8 released

2008-02-13 Thread Russ Allbery
I'm pleased to announce release 0.8 of wallet. This software is beta-quality and should be treated with caution. It is currently being tested for production deployment at Stanford. The wallet is a system for managing secure data, authorization rules to retrieve or change that data, and audit

Re: support SSO in Windows with Keberos TGT

2008-02-13 Thread Jeffrey Altman
Sylvain - MVP GPOs wrote: Hi, perharps you can have a look on www.centrify.com which provide a interop SSO between Windows/Unix/linux based on Kerberos... sylvain How would that solve the need a single credential cache problem that this thread is discussing? smime.p7s Description:

Re: kadmin.local segfault gdb output (valgrind output)

2008-02-13 Thread Steven Miller
Very weird, when running kadmin.local under valgrind, it does NOT segfault. I am including the valgrind output. --- [EMAIL PROTECTED] ~]# valgrind kadmin.local ==9674== Memcheck, a memory error detector. ==9674== Copyright (C) 2002-2005, and

Re: kadmin.local segfault gdb output (valgrind output)

2008-02-13 Thread Ken Raeburn
On Feb 13, 2008, at 20:57, Steven Miller wrote: Very weird, when running kadmin.local under valgrind, it does NOT segfault. I am including the valgrind output. Here, valgrind is complaining about some uninitialized fields, and in the gdb stack trace, the program was copying data based on one

Kerberos V5 refuses authentication because Kerberos checksum verification failed: Bad encryption type

2008-02-13 Thread Victor Sudakov
Colleagues, What could be the reason that I cannot telnet from FreeBSD to Solaris 10 with the following error: Connected to oracle.sibptus.tomsk.ru. Escape character is '^]'. [ Trying mutual KERBEROS5 (host/[EMAIL PROTECTED])... ] [ Kerberos V5 refuses authentication because Kerberos checksum

kadmin -c : shouldn't this work?

2008-02-13 Thread Jeff Blaine
% /usr/rcf-krb5/bin/kinit -p admin/admin Password for admin/[EMAIL PROTECTED]: % /usr/rcf-krb5/sbin/kadmin -c /tmp/krb5cc_26560 Authenticating as principal admin/[EMAIL PROTECTED] with existing credentials. kadmin: Matching credential not found while initializing kadmin interface