Re: Problem writing keyblock to krb5.keytab w/keytab binary format.

2009-07-15 Thread kerberos
On Wed, Jul 15, 2009 at 3:16 PM, Ken Raeburn wrote: > On Jul 15, 2009, at 12:36, kerbe...@noopy.org wrote: >> > > This is not the mechanism Kerberos uses for generating a DES key from a > password and salt.  Check RFC 3961, particularly section 6.2. Uggh, you're right. Followed the RFC and things

Re: Problem writing keyblock to krb5.keytab w/keytab binary format.

2009-07-15 Thread Ken Raeburn
On Jul 15, 2009, at 12:36, kerbe...@noopy.org wrote: > In my DES calls I: > - pad and convert the salt from string to unsigned long to byte[8]. > - use the converted salt as the key and initialization vector. > - use a cipher mode of CBC. > - write password to crypto stream. > - return array o

Problem writing keyblock to krb5.keytab w/keytab binary format.

2009-07-15 Thread kerberos
Hello, I've reviewed the following document about the binary format used in Kerberos keytab: http://www.gnu.org/software/shishi/manual/html_node/The-Keytab-Binary-File-Format.html In my Java code I am able to read a file stream (e.g. for /etc/krb5.keytab) and starting with the 16-bit header (

Re: windows 2003 domain controller, mod_auth_kerb in linux, issuewitt kerberos

2009-07-15 Thread Christopher D. Clausen
Windows AD accounts require "allow this account to be trusted for delegation" to have Internet Explore actually delegate credentials to the web server (which you are requesting via the KrbSaveCredentials On parameter.) Try turning this off and see if it does what you want. Also, (and this is p

Re: ftp client: authentication failed

2009-07-15 Thread Christopher D. Clausen
Lloyd wrote: > Hi, > I am new to kerberos and trying to set up in a sample scenario as > part of learning. I have downloaded and installed Kerberos 5 on a > Linux system. As per the install guide I have successfully configured > KDC and Application server. in the application server the "ftpd" >

kprop: Software caused connection abort while reading response from server

2009-07-15 Thread Matthew . GARRETT
Folks I have had Kerberos and Replication working fine for the last 6 months or so , with out any problems. However on the master KDC the root file system filled up 100% , which is now fixed However the cron job that replicated the Master and Slave kdc generate the following error /usr/kerb

ftp client: authentication failed

2009-07-15 Thread Lloyd
Hi, I am new to kerberos and trying to set up in a sample scenario as part of learning. I have downloaded and installed Kerberos 5 on a Linux system. As per the install guide I have successfully configured KDC and Application server. in the application server the "ftpd" daemon is also s