Re: Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-23 Thread Surendra Babu A
essed AS_REQ, AS_REP, TGS_REQ and TGS_REP packets in to that? - we are facing probelm in forming the AP_REQ packet for MUTUAL AUTHENTICTAION with the Server. Any thoughts on the same? Thanks a lot in advance, -Surendra - Original Message - From: Douglas E. Engert To: Surendra B

Re: Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-23 Thread Surendra Babu A
Hi Team, Could you please let me know your thoughts on the below mentioned issue. Point #1 -- I am working on SA (Server Authentication) feature of Kerberos. - Is it required to port GSSAPI code for this feature of SA? - If so, where should I use this mechansim in kerberos

Is it required to use GSSAPI code for the Kerberos Server Auth?

2006-03-21 Thread Surendra Babu A
Hi Team, Could you please let me know your thoughts on the below mentioned issue. Point #1 -- I am working on SA (Server Authentication) feature of Kerberos. - Is it required to port GSSAPI code for this feature of SA? - If so, where should I use this mechansim in kerberos client code? Th

information about Kerberos error of KRB_ERR_RESPONSE_TOO_BIG.??

2006-02-23 Thread Surendra Babu A
in advance, -Surendra - Original Message - From: Douglas E. Engert To: Surendra Babu A Cc: kerberos@mit.edu Sent: Friday, February 03, 2006 9:12 PM Subject: Re: Shall I capture Kerberos-password failure error message ALONE? Surendra Babu A wrote: > And one m

Re: Shall I capture Kerberos-password failure error message ALONE?

2006-02-06 Thread Surendra Babu A
t send the preauth information from AS-REQ pkt, we will receive password failure but not preauth failure error. Is it right? Please let me know your thoughts. Thank you, -Surendra - Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A

Re: Shall I capture Kerberos-password failure error message ALONE?

2006-02-02 Thread Surendra Babu A
And one more thing: I am using Windows 2003 exchange server as my KDC server. Please let me know your thoughts. Thank you, -Surendra - Original Message - From: Surendra Babu A To: kerberos@mit.edu Sent: Thursday, February 02, 2006 12:58 PM Subject: Shall I capture Kerberos

Shall I capture Kerberos-password failure error message ALONE?

2006-02-01 Thread Surendra Babu A
Hi Kerbros Team, If I enter the wrong passowrd at KDc client, the KDC server gives the response of PREAUTH_FAULRE error. Right? 1. Is there anyway, i can get password failure error message? Is it true that "Password verification will be done before sending preauth failure message?" 2. Can I

Kerberos-password failure message?

2006-01-23 Thread Surendra Babu A
Hi Kerberos Team, This regarding Kerberos Authentication issue. If we enter the wrong password at the client side and connect with the KDC, KDc returns PREAUTH_REQUIRED/PREAUTH_FAILURE error. Right? In waht case, KDC gives password failure error if we neter wrong password at the Kerberos clien

Re: Application Server and KDC share some information like Service Tktkey?

2005-12-30 Thread Surendra Babu A
t Kerberos? Thanks a lot in advance, -Surendra - Original Message - From: "Paul B. Hill" <[EMAIL PROTECTED]> To: "'Surendra Babu A'" <[EMAIL PROTECTED]> Sent: Thursday, December 29, 2005 3:19 AM Subject: RE: Application Server and KDC share som

Re: Application Server and KDC share some information like Service Tktkey?

2005-12-28 Thread Surendra Babu A
able to decode the response. That means, some thing to be done (keytab file generation/etc) to be at done at SMTP server side??? Please let me know your thoughts. Happy Christmas. Regards, -Surendra - Original Message - From: "Surendra Babu A" <[EMAIL PROTECTED]> T

Re: Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
onment. For example, for > Solaris 8, see kadmin reference page. > > > === > > - Original Message - > From: "Surendra Babu A" <[EMAIL PROTECTED]> > To: "Douglas E. Engert" <[EMAIL PROTECTED]> > Cc: > Sent: Wednesday, December 28, 2005 11

Re: Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
Surendra Babu A" <[EMAIL PROTECTED]> To: "Douglas E. Engert" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, December 28, 2005 11:46 AM Subject: Application Server and KDC share some information like Service Tkt key? > Hi Douglas, > > Could you please clarify the follow

Application Server and KDC share some information like Service Tkt key?

2005-12-28 Thread Surendra Babu A
Hi Douglas, Could you please clarify the following issue? I am working on Kerberos Server Authentication feature and using the Windows 2000 Exchange server as the KDc server and SMTP server as the Application server. My aim: Server authentication should be done. Clarification on "Service Ticket

How to create a username and password at KDC for User Auth

2005-12-15 Thread Surendra Babu A
Hi, Thanks a lot for the information so far. One more question: I am using Linux KDC server. How to create a login name and password to get authentication? I need to use knit command somewhere? At what location should I use and how should i use? #1. If I want to create "aa" as login name and

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-13 Thread Surendra Babu A
- Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, December 07, 2005 7:34 PM Subject: Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth?? > > > Surendra Babu

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
> > > 2. For Server Authentication feature: if the Application Server is a > > Kerberised ESMTP server, how it > > should proceed? After sending the Service ticket to ESMTP server, what should > happen? Could you please > > let me know the Client and Applciation Server handshake and transfer

Re: Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Application Server transactions??? How to communicate with GSSAPI? Thank you, -Surendra - Original Message - From: "Douglas E. Engert" <[EMAIL PROTECTED]> To: "Surendra Babu A" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, December 07, 2005 5:11 PM Subje

Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Hi Kerberos Team, Could you please let me know your thoughts on the following questions? Thank a lot in advance. 1. While forming the TGS-REQ pkt, I need to send the Server name with that TGS_REQ packet. For this reason, I need to use krb5_parse_name(). second Parameter for this API is a Serv

Clarifications sought on Kerberos SA: TGS_REQ and Server Auth??

2005-12-07 Thread Surendra Babu A
Hi Kerberos Team, Could you please let me know your thoughts on the following questions? Thank a lot in advance, 1. While forming the TGS-REQ pkt, I need to send the Server name with that TGS_REQ packet. For this reason, I need to use krb5_parse_name(). second Parameter for this API is a Serve