Re: Destroy expired tickets?

2008-11-07 Thread Simon Wilkinson
On 6 Nov 2008, at 15:05, Ken Raeburn wrote: On Nov 5, 2008, at 21:16, Stefan Monnier wrote: How can I destroy expired tickets? They're useless at best, and in some cases they're positively harmful (their presence prompts `ssh' to contact the KDC to try and delegate credentials, which is a

Kadmin error

2008-11-07 Thread VAMSHI VELAGAPURI
Hi, I am getting this error when i try to run kadmin daemon. kadmind[15257](Error): Cannot find/read stored master key while initializing, aborting when i tried to do kdb5_util create -s it says that [EMAIL PROTECTED] krb5kdc]# kdb5_util create -s Loading random data Initializing database

kinit ignores kdc in config file on Mac 10.5

2008-11-07 Thread petesea
I have a user with a Mac 10.5 system and it SEEMS like kinit is ignoring the kdc entries in the config file. Instead it APPEARS to do a DNS query for the realm and then uses the A records returned and sends the kerberos request packets to them. The result is kinit takes a while and eventually

Re: Destroy expired tickets?

2008-11-07 Thread Stefan Monnier
They're useless at best, and in some cases they're positively harmful (their presence prompts `ssh' to contact the KDC to try and delegate credentials, which is a waste if the tickets are expired, and is really annoying when the KDC times out because it's behind a firewall). Hm, that sounds a

Re: WTS and KfW for SPNEGO

2008-11-07 Thread Christian Weiß
Hello Christopher, that's it! Thank you for your really fast and helpful answer. Even better it would be if KfW would fall back to the 'krb5.ini' in c:\windows if there is none in c:\dokuments and settings\user\windows. Then you wouldn't have to put it into every user's profile folder...

Re: WTS and KfW for SPNEGO

2008-11-07 Thread Christopher D. Clausen
Christian, I recomend that you read through this email and follow its instructions: http://mailman.mit.edu/pipermail/kerberos/2008-January/012978.html That should solve the problem permanently. I personally like having my own per-user krb5.ini. I can fix configuration problems on machines