Re: Max renewable lifetime issues

2013-03-13 Thread Tiago Elvas
Thanks a lot Benjamin! I'll try that tomorrow, hope it'l work :) On Wed, Mar 13, 2013 at 7:44 PM, Benjamin Kaduk wrote: > On Wed, 13 Mar 2013, Tiago Elvas wrote: > > Hi all, >> >> I am having a problem in my system which I do not understand why it's >> happening. >> Firstly, I have a KDC runnin

Re: Max renewable lifetime issues

2013-03-13 Thread Benjamin Kaduk
On Wed, 13 Mar 2013, Tiago Elvas wrote: > Hi all, > > I am having a problem in my system which I do not understand why it's > happening. > Firstly, I have a KDC running on a RedHat 5.7 machine. I have the parameter > maximum_renewable_life as 5000days in kdc.conf and krb5.conf. For each user > I h

RE: [EXTERNAL] Re: Kerberos Constrained Delegation and Credential Caching

2013-03-13 Thread Nebergall, Christopher
>>Is the connecting client doing any kerb auth at all? No. >>I don't see a technical problem in his, however it is not clear to me why you >>would do all of this in mod_auth_kerb given you are doing no authentication >>there at this point. No technical reason beyond reducing code duplication w

RE: [EXTERNAL] Re: Kerberos Constrained Delegation and Credential Caching

2013-03-13 Thread Simo Sorce
On Wed, 2013-03-13 at 15:10 +, Nebergall, Christopher wrote: > Thank you for your response it helped a great deal. > > >The fact is that there are a few ways in which this work, when > mod_auth_kerb is used, the action of exporting a ccache file with the > received >credentials is basical

Re: Max renewable lifetime issues

2013-03-13 Thread Tiago Elvas
Thanks a lot Matt! That solved my problem in the linux client! I was missing the "modprinc -maxlife 14hours krbtgt/[REALM_in_CAPS]" Let's hope someone can help me with Windows client issue. Best regards, Tiago On Wed, Mar 13, 2013 at 4:11 PM, Matt Garman wrote: > On Wed, Mar 13, 2013 at 4:47 AM

RE: [EXTERNAL] Re: Kerberos Constrained Delegation and Credential Caching

2013-03-13 Thread Nebergall, Christopher
Do you have an idea why I can't get t_s4u test program in 1.11.1 running against Windows 2008 R2 SP 1? Set up comments from t_s4u.c /* * Test program for protocol transition (S4U2Self) and constrained delegation * (S4U2Proxy) * * Note: because of name canonicalization, the following tips ma

RE: [EXTERNAL] Re: Kerberos Constrained Delegation and Credential Caching

2013-03-13 Thread Nebergall, Christopher
Thank you for your response it helped a great deal. >The fact is that there are a few ways in which this work, when mod_auth_kerb >is used, the action of exporting a ccache file with the received >credentials >is basically equivalent to calling gss_acquire_cred_impersonate_name Ok, so the

Re: Max renewable lifetime issues

2013-03-13 Thread Matt Garman
On Wed, Mar 13, 2013 at 4:47 AM, Tiago Elvas wrote: > I am having a problem in my system which I do not understand why it's > happening. > Firstly, I have a KDC running on a RedHat 5.7 machine. I have the parameter > maximum_renewable_life as 5000days in kdc.conf and krb5.conf. For each user > I h

Max renewable lifetime issues

2013-03-13 Thread Tiago Elvas
Hi all, I am having a problem in my system which I do not understand why it's happening. Firstly, I have a KDC running on a RedHat 5.7 machine. I have the parameter maximum_renewable_life as 5000days in kdc.conf and krb5.conf. For each user I have added, I also configured as 5000days max_renewable