RE: pkinit client build in windows

2008-03-19 Thread Eswar S
I think problem is in accessing global shared variables in windows I have build with OPENSSL_EXPORT_VAR_AS_FUNCTION preprocessor also. Item pointer values are not getting initialized. I am doing all these in VC 2005. I am using correct openssl 0.9.8g dll and lib. I have built these with

gss-server support

2008-03-19 Thread Rathod, Nitin
Hello, Can anyone guide me in starting gss-server command on an Linux box for starting an HTTP service. I tried giving the following command for starting the HTTP service gss-server HTTP HTTP/[EMAIL PROTECTED] But it is giving the error as: GSS-API error acquiring credentials:

Re: cross-realm authentication works only with .k5login

2008-03-19 Thread Andrea
Hi, i inserted the regular expression as you suggested, and on that machine (let's say this machine as MASTER) I can Single Sign On with both REALMS. However if I use the same krb5.conf on an another machine (let's say SLAVE) setting the realm SOLARIS2 as default I can't Single Sign On on MASTER

Re: sendmail as MSA and client side GSSAPI

2008-03-19 Thread Nicolas Williams
On Wed, Mar 19, 2008 at 02:52:41AM +, Victor Sudakov wrote: In comp.mail.sendmail Victor Sudakov [EMAIL PROTECTED] wrote: Now how do I enable GSSAPI authentication for local users? What should I put into the /etc/mail/authinfo file so that each local user who has a Kerberos ticket

Re: sendmail as MSA and client side GSSAPI

2008-03-19 Thread Victor Sudakov
Nicolas Williams wrote: Now how do I enable GSSAPI authentication for local users? What should I put into the /etc/mail/authinfo file so that each local user who has a Kerberos ticket could authenticate herself to the mailhub? The users send mail from mutt, pine etc by calling

Re: sendmail as MSA and client side GSSAPI

2008-03-19 Thread Nicolas Williams
On Wed, Mar 19, 2008 at 12:29:55PM -0500, Nicolas Williams wrote: To make it work will require enough changes that one could be forgiven may Kerberos mailing list Kerberos@mit.edu

Re: pkinit client build in windows

2008-03-19 Thread Jeffrey Altman
Eswar S wrote: I think problem is in accessing global shared variables in windows I have build with OPENSSL_EXPORT_VAR_AS_FUNCTION preprocessor also. Item pointer values are not getting initialized. I am doing all these in VC 2005. I am using correct openssl 0.9.8g dll and lib. I have built

On Windows session boot - Excuse for my english

2008-03-19 Thread Hamza . Badidi
Hello, I think I've understood globaly how do Kerberos 5 works.. But I still have some questions about the manner the authentication is made on the boot of the session (just after when we enter our loggin and password). How the authetication is exactely made? -Is a Daemon present in the

Re: sendmail as MSA and client side GSSAPI

2008-03-19 Thread Sam Hartman
Nicolas == Nicolas Williams [EMAIL PROTECTED] writes: Nicolas See: Nicolas http://www.sendmail.org/~ca/email/auth.html Nicolas under Using sendmail as a client with AUTH. Nicolas It doesn't really address how to use this with Kerberos. Nicolas It's not clear if you just

Re: sendmail as MSA and client side GSSAPI

2008-03-19 Thread Nicolas Williams
On Wed, Mar 19, 2008 at 03:17:29PM -0400, Sam Hartman wrote: MIt does have a configuration where this works with sendmail for foreground delivery to a mailhub. I don't have details though. Good to know. Could you cajole someone into posting the details?

CentOS attempting to set up Kerberos 5-tickets created destroyed successfully, now an issue

2008-03-19 Thread Damo Gets
I am currently attempting to set up a kerberos primary server on a machine running CentOS4 to serve a WAN that I am working on. I've been using the Red Hat Enterprise Linux 4 Reference Guide (in .pdf format) to do so. It's served me far better than any of the other FAQs that I've used on

Re: CentOS attempting to set up Kerberos 5-tickets created destroyed successfully, now an issue

2008-03-19 Thread Ken Raeburn
On Mar 19, 2008, at 17:09, Damo Gets wrote: When I execute 'kadmin addprinc -randkey host/blah.example.com' I receive the following error: To execute a query within kadmin, use kadmin -q query where the query is passed as one argument -- in this case, you'd have to quote addprinc -randkey

Re: CentOS attempting to set up Kerberos 5-tickets created destroyed successfully, now an issue

2008-03-19 Thread Tim Mooney
In regard to: CentOS attempting to set up Kerberos 5-tickets created ...: I started the three daemons, also with no issues with the following invocation: /sbin/service krb5kdc start /sbin/service kadmin start /sbin/service krb524 start It's very unlikely that you will ever need krb524. I