Cannot run rlogind, telnetd

2010-01-19 Thread vinay kumar
Hi, I want to capture AP_REQ and AP_REP, for that i want to run telnetd, rlogind daemons on my application server. When i run rlogind i will get the following error: * rlogind: Can't get peer name of remote host: Socket operation on non-socket * when i run rsh i get* host unknown

Windows event id 4 (kerberos)

2010-01-19 Thread raj esh L
We have observed Kerberos event id4 on one member server (Print server )BRAPRINT001 (10.1.37.167). Please find the description below about the event id. Can some one please help me on it ? Event Type:Error Event Source: Kerberos Event Category: None Event ID:

kstart 3.16 released

2010-01-19 Thread Russ Allbery
I'm pleased to announce release 3.16 of kstart. k4start, k5start, and krenew are modified versions of kinit which add support for running as a daemon to maintain a ticket cache, running a command with credentials from a keytab and maintaining a ticket cache until that command completes, obtaining

Re: Cannot run rlogind, telnetd

2010-01-19 Thread Edward Murrell
You probably do not have reverse DNS set up properly, or the reverse DNS name does not match the keytab installed on the application server. In any case, you should ditch telnet and rlogin in favour of SSH. On Tue, 2010-01-19 at 18:19 +0530, vinay kumar wrote: I want to capture

Re: Cannot run rlogind, telnetd

2010-01-19 Thread Russ Allbery
Edward Murrell edw...@murrell.co.nz writes: You probably do not have reverse DNS set up properly, or the reverse DNS name does not match the keytab installed on the application server. Also, you can't just run rlogind from the command line. It's a network server that expects to be run out of

Re: Windows event id 4 (kerberos)

2010-01-19 Thread Christopher D. Clausen
Is this for an actual Windows computer? Or a non-Windows machine running something like Samba? - I see these all the time. I believe these occur on occation when a computer account automatically updates its machine account password in Active Directory. (This is a normal function of a

Re: Kerberos Digest, Vol 85, Issue 25

2010-01-19 Thread raj esh L
Can some one reply my query ? 3. Windows event id 4 (kerberos) (raj esh L) From: kerberos-requ...@mit.edu kerberos-requ...@mit.edu To: kerberos@mit.edu Sent: Tue, 19 January, 2010 22:33:46 Subject: Kerberos Digest, Vol 85, Issue 25 Send Kerberos mailing list

Re: Kerberos Digest, Vol 85, Issue 25

2010-01-19 Thread Russ Allbery
raj esh L rrcrajesh2...@yahoo.com writes: Can some one reply my query ? 3. Windows event id 4 (kerberos) (raj esh L) I don't think anyone on this mailing list can give you more information than what your device already gave you in the Description field, which is a very thorough explanation

Re: Kerberos Digest, Vol 85, Issue 25

2010-01-19 Thread raj esh L
of course, in this description 3 server names are involved. I don't understand which is kerberos client in this scenario and which server is trying to query what and where it is getting failed. is it because of SPN ? if yes, which SPN. From: Russ Allbery

Re: Windows event id 4 (kerberos)

2010-01-19 Thread raj esh L
Than Q very much for your information and would appreciate. But I verified SPNs and computer names - No duplication found. These computers not updated recently and exist from long time. Thanks once again about networking help .I would check and give you update. i will give the setspn details

Re: kstart 3.16 released

2010-01-19 Thread Jaap Winius
On Tue, 19 Jan 2010 10:58:24 -0800, Russ Allbery wrote: I'm pleased to announce release 3.16 of kstart. Yea! :-) Thanks, Russ! Jaap PS -- Would you perhaps consider maintaining a symlink to the newest version of kstart? Then I won't always have to change my on-line documentation when new

Re: kstart 3.16 released

2010-01-19 Thread Russ Allbery
Jaap Winius jwin...@umrk.nl writes: PS -- Would you perhaps consider maintaining a symlink to the newest version of kstart? Then I won't always have to change my on-line documentation when new versions appear. Ah, hm, that's a good idea. I should probably update my release software to do

find inactive accounts

2010-01-19 Thread Steve Glasser
Hi list, For PCI reasons I have to report all accounts which have been inactive (i.e. no logins) for three months. The goal here is to automate the process... I know I can get users and login dates from krb5kdc.log, and I can find the last login date. However Kerberos logs dates as month day,

Re: find inactive accounts

2010-01-19 Thread Ken Raeburn
On Jan 20, 2010, at 00:41, Steve Glasser wrote: I know I can get users and login dates from krb5kdc.log, and I can find the last login date. Be careful with that... if you're not doing some kind of preauth method, the AS_REQ messages in the log only indicate that someone tried to get an