In the TGS_REQ packet, KDC_REQ_BODY is missing

2006-04-03 Thread Surendra Babu
Hi Team, Thank you for your information. Thaks a lot for your guidance. COuld you please let me know your thoughts on ..How TGS_REQ packet generation happens, What steps should be followed? In my TGS_REQ packet, KDC_REQ_BODY fileds are missing. Please find attached my capture file. Please have a

Re: Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-23 Thread Surendra Babu A
essed AS_REQ, AS_REP, TGS_REQ and TGS_REP packets in to that? - we are facing probelm in forming the AP_REQ packet for MUTUAL AUTHENTICTAION with the Server. Any thoughts on the same? Thanks a lot in advance, -Surendra - Original Message - From: Douglas E. Engert To: Surendra B

Re: Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-23 Thread Surendra Babu A
Hi Team, Could you please let me know your thoughts on the below mentioned issue. Point #1 -- I am working on SA (Server Authentication) feature of Kerberos. - Is it required to port GSSAPI code for this feature of SA? - If so, where should I use this mechansim in kerberos

Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-21 Thread Surendra Babu A
Hi Team, Could you please let me know your thoughts on the below mentioned issue. Point #1 -- I am working on SA (Server Authentication) feature of Kerberos. - Is it required to port GSSAPI code for this feature of SA? - If so, where should I use this mechansim in kerberos client code? Th

USERID case sensitiveness on ADS server? Any solution at Kerberos client side?

2006-03-09 Thread Surendra Babu
Hi Kerberos Team,, I am seeing the problem with Case sensitiveness of Username. 1. I am wroking on the Kerberos with Windows ADS server. While trying to do User AUthentication, I am seeing the following issue. I am using C code not Java Libraries 2. Our Previous sysadmin guys have set the User n

Kerbeors Windows_ADS: UserID case sensitive issue.

2006-03-09 Thread Surendra Babu
Hi Kerberos Team,, I am seeing the problem with Case sensitiveness of Username. 1. I am wroking on the Kerberos with Windows ADS server. While trying to do User AUthentication, I am seeing the following issue. I am using C code not Java Libraries 2. Our Previous sysadmin guys have set the User n

information about Kerberos error of KRB_ERR_RESPONSE_TOO_BIG.??

2006-02-23 Thread Surendra Babu A
in advance, -Surendra - Original Message - From: Douglas E. Engert To: Surendra Babu A Cc: kerberos@mit.edu Sent: Friday, February 03, 2006 9:12 PM Subject: Re: Shall I capture Kerberos-password failure error message ALONE? Surendra Babu A wrote: > And one m

Re: Shall I capture Kerberos-password failure error message ALONE?

2006-02-06 Thread Surendra Babu A
t send the preauth information from AS-REQ pkt, we will receive password failure but not preauth failure error. Is it right? Please let me know your thoughts. Thank you, -Surendra - Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A

Re: Shall I capture Kerberos-password failure error message ALONE?

2006-02-02 Thread Surendra Babu A
And one more thing: I am using Windows 2003 exchange server as my KDC server. Please let me know your thoughts. Thank you, -Surendra - Original Message - From: Surendra Babu A To: kerberos@mit.edu Sent: Thursday, February 02, 2006 12:58 PM Subject: Shall I capture Kerberos

Shall I capture Kerberos-password failure error message ALONE?

2006-02-01 Thread Surendra Babu A
Hi Kerbros Team, If I enter the wrong passowrd at KDc client, the KDC server gives the response of PREAUTH_FAULRE error. Right? 1. Is there anyway, i can get password failure error message? Is it true that "Password verification will be done before sending preauth failure message?" 2. Can I

Kerberos-password failure message?

2006-01-23 Thread Surendra Babu A
Hi Kerberos Team, This regarding Kerberos Authentication issue. If we enter the wrong password at the client side and connect with the KDC, KDc returns PREAUTH_REQUIRED/PREAUTH_FAILURE error. Right? In waht case, KDC gives password failure error if we neter wrong password at the Kerberos clien

Re: Application Server and KDC share some information like Service Tktkey?

2005-12-30 Thread Surendra Babu A
t Kerberos? Thanks a lot in advance, -Surendra - Original Message - From: "Paul B. Hill" <[EMAIL PROTECTED]> To: "'Surendra Babu A'" <[EMAIL PROTECTED]> Sent: Thursday, December 29, 2005 3:19 AM Subject: RE: Application Server and KDC share som

Re: Application Server and KDC share some information like Service Tktkey?

2005-12-28 Thread Surendra Babu A
able to decode the response. That means, some thing to be done (keytab file generation/etc) to be at done at SMTP server side??? Please let me know your thoughts. Happy Christmas. Regards, -Surendra - Original Message - From: "Surendra Babu A" <[EMAIL PROTECTED]> T

Re: Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
onment. For example, for > Solaris 8, see kadmin reference page. > > > === > > - Original Message - > From: "Surendra Babu A" <[EMAIL PROTECTED]> > To: "Douglas E. Engert" <[EMAIL PROTECTED]> > Cc: > Sent: Wednesday, December 28, 2005 11

Re: Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
ros database. Solaris - Equivalent functionality is available for Solaris users via the kadmin tool that is part of Solaris operating environment. For example, for Solaris 8, see kadmin reference page. === - Original Message - From: "

Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
Hi Douglas, Could you please clarify the following issue? I am working on Kerberos Server Authentication feature and using the Windows 2000 Exchange server as the KDc server and SMTP server as the Application server. My aim: Server authentication should be done. Clarification on "Service Ticket

How to create a username and password at KDC for User Auth

2005-12-15 Thread Surendra Babu A
Hi, Thanks a lot for the information so far. One more question: I am using Linux KDC server. How to create a login name and password to get authentication? I need to use knit command somewhere? At what location should I use and how should i use? #1. If I want to create "aa" as login name and

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-13 Thread Surendra Babu A
- Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, December 07, 2005 7:34 PM Subject: Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth?? > > > Surendra Babu

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
> > > 2. For Server Authentication feature: if the Application Server is a > > Kerberised ESMTP server, how it > > should proceed? After sending the Service ticket to ESMTP server, what should > happen? Could you please > > let me know the Client and Applciation Server handshake and transfer

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Application Server transactions??? How to communicate with GSSAPI? Thank you, -Surendra - Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, December 07, 2005 5:11 PM Subje

Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Hi Kerberos Team, Could you please let me know your thoughts on the following questions? Thank a lot in advance. 1. While forming the TGS-REQ pkt, I need to send the Server name with that TGS_REQ packet. For this reason, I need to use krb5_parse_name(). second Parameter for this API is a Serv

Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Hi Kerberos Team, Could you please let me know your thoughts on the following questions? Thank a lot in advance, 1. While forming the TGS-REQ pkt, I need to send the Server name with that TGS_REQ packet. For this reason, I need to use krb5_parse_name(). second Parameter for this API is a Serve

Application server to be configured with KDC for Server Authentication

2005-11-29 Thread Surendra Babu
Hi Team, I am working on Server Authentication feature of Kerbeors. Could you please give the following clarifications? 1. I am working on Server Authentication feature for sending a mail. Before sending a mail, I will send the KDC's Service Tkt to SMTP server (Kerborised SMTP Server). The SMTP s

Some problem in forming the TGS request pkt with krb5_parse_name()

2005-11-28 Thread Surendra Babu
Hi Kerbeors Team, I am seeing some problem in forming the TGS request packet with krb5_parse_name() function while parsing the Principal (with only IPADDRESS.but not with hostname& DNS server configured case). 1. To form the TGS request packet, I need to call the krb5_parse_name() fu

Re: Where can I find the "WORKING" Kerberos client code?

2004-12-02 Thread Surendra Babu Ande
Hello Krbdev, Thanks a lot for the overwhelming response. Basic Question: To install the Kerberos server and client, we are following .../docs/install-guide.ps file. Is it fine? Please let me know the correct doc. Thanks a lot in advance, -Surendra Surendra Babu Ande <[EM

Re: Where can I find the "WORKING" Kerberos client code?

2004-12-02 Thread Surendra Babu Ande
installtion we can download from the MIT site? IS server downloadables are there with MIT site? What files should I install for Server and for Client. I am a bit hazy about this. Please clarify the same. Thanks, -Surendra Ken Raeburn <[EMAIL PROTECTED]> wrote: On Nov 30, 2004, at 08:20, Su

Where can I find the "WORKING" Kerberos client code?

2004-11-30 Thread Surendra Babu Ande
Hello Kerberos Developers Team, Nice to meet you. I am Surendra from INDIA. We are planning to implement Kerberos Client for our Printer Network Interface card for pSOS+ environment. Our aim is to provide Client and Server authentication. Could you please give some pointers to implement the same