Re: SIGFPE/FPE_FLTINV, Arithmetic exception with GSS-API

2014-03-27 Thread Michael-O
Am 2014-03-27 16:13, schrieb Greg Hudson: > On 03/27/2014 06:54 AM, Michael-O wrote: >> Program received signal SIGFPE, Arithmetic exception >>si_code: 7 - FPE_FLTINV - invalid FP operation. >> 0x20007d0960f0:2 in krb5int_yarrow_init_Limits+0x132 () from >> /usr/lib/hpux32/libk5crypto.so >

Re: Building Kerberos without Camellia

2014-03-27 Thread Tom Yu
vamsi krishna writes: > Is there a way to build Kerberos without Camellia Encryption support. > The problem is my OpenSSL libraries don't have Camellia support and > they failed to link while doing Kerberos build. We've had previous requests to do this. By what means are you obtaining your Ope

Building Kerberos without Camellia

2014-03-27 Thread vamsi krishna
Hi All, Is there a way to build Kerberos without Camellia Encryption support. The problem is my OpenSSL libraries don't have Camellia support and they failed to link while doing Kerberos build. Regards, Vamsi

Re: pan_krb5 not being called by su - root?

2014-03-27 Thread Russ Allbery
Wendy Lin writes: > No No. I was asking for s su - root, for a plain, normal user. In that > case pam_krb5 is not called, or does not fill in any tickets. But a > kinit afterwards as user root does fill in the tickets I don't know why it would not be called in that case. It certainly normally i

Re: pan_krb5 not being called by su - root?

2014-03-27 Thread Wendy Lin
On 27 March 2014 18:50, Russ Allbery wrote: > Wendy Lin writes: > >> Where is the pam config which controls whether pam_krb5 is not called >> for user root? > > On Debian and Ubuntu, it's this part at the top of /etc/pam.d/su: > > # This allows root to su without passwords (normal operation) > au

Re: pan_krb5 not being called by su - root?

2014-03-27 Thread Russ Allbery
Wendy Lin writes: > Where is the pam config which controls whether pam_krb5 is not called > for user root? On Debian and Ubuntu, it's this part at the top of /etc/pam.d/su: # This allows root to su without passwords (normal operation) auth sufficient pam_rootok.so I'm not sure on Red Hat

Re: pan_krb5 not being called by su - root?

2014-03-27 Thread Wendy Lin
On 27 March 2014 18:37, Russ Allbery wrote: > Wendy Lin writes: > >> Does anyone have a good idea why pam_krb5 does not appear to be called >> for su - root while exec login root calls pam_krb5? > > Check /etc/pam.d/su and see if su has special rules that cause it to > bypass your regular PAM con

Re: KDC5KDC process, and slaves' all stopped

2014-03-27 Thread Benjamin Kaduk
On Wed, 26 Mar 2014, Tareq Alrashid wrote: ….within 7 seconds of each other. At krb5.10.2 - Never seen this before! No record of any negative/malicious or network issues Could this have been cause? due to kdc’s having received a malformed pack http://web.mit.edu/kerberos/advisories/MITKRB5-SA

Re: pan_krb5 not being called by su - root?

2014-03-27 Thread Russ Allbery
Wendy Lin writes: > Does anyone have a good idea why pam_krb5 does not appear to be called > for su - root while exec login root calls pam_krb5? Check /etc/pam.d/su and see if su has special rules that cause it to bypass your regular PAM configuration. Sometimes it does. Also, note that su's P

pan_krb5 not being called by su - root?

2014-03-27 Thread Wendy Lin
Does anyone have a good idea why pam_krb5 does not appear to be called for su - root while exec login root calls pam_krb5? Wendy Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: root login via Kerberos5 - "User not known to the underlying authentication module" - why?

2014-03-27 Thread Wendy Lin
On 24 March 2014 11:58, Predrag Zecevic [Unix Systems Administrator] wrote: > On 03/24/14 11:31 AM, Wendy Lin wrote: >> I am trying to allow user root (uid=0) to be authenticated via >> Kerberos5 at login time, too, but if I do I get a "User not known to >> the underlying authentication module" er

SIGFPE/FPE_FLTINV, Arithmetic exception with GSS-API

2014-03-27 Thread Michael-O
Hi folks, I am using a HP-branded MIT Kerberos 1.3.5, with the fixed upto 1.6.2 (as per release notes) on HP-UX 11.31. I presume that this means the version is very very old but has backports. The GSS-API calls actually happen in libcurl 7.35.0 which is called from a C function which in turn is

Re: SIGFPE/FPE_FLTINV, Arithmetic exception with GSS-API

2014-03-27 Thread Greg Hudson
On 03/27/2014 06:54 AM, Michael-O wrote: > Program received signal SIGFPE, Arithmetic exception > si_code: 7 - FPE_FLTINV - invalid FP operation. > 0x20007d0960f0:2 in krb5int_yarrow_init_Limits+0x132 () from > /usr/lib/hpux32/libk5crypto.so [...] > Is this issue known, if yes, has this been

Re: Client keytab ignored

2014-03-27 Thread Michael-O
Am 2014-03-27 00:35, schrieb steve: > On Wed, 2014-03-26 at 23:50 +0100, Michael-O wrote: >>> On Wed, 2014-03-26 at 17:34 +0100, Michael-O wrote: Hi, I am trying to obtain a service ticket with a client keytab for my account. Unfortunately it fails. I wanted to narrow this down