Hello all,
I left the kdc server running for the whole night, and this morning I found
the kdc server has already been down. The reason for this is that the
/var/log/krb5kdc.log file beacame too large, over 2G. I deleted it and started
the server again, and the log file was like this:
Oct
Hi all,
The useFirstPass option is mentioned here:
http://java.sun.com/j2se/1.5.0/docs/guide/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html
As follows:
The Krb5LoginModule also recognizes the following additional Configuration
options that enable you to
of Krb5LoginModule, and develop my own LoginModule for java applet?
Thank you for any help!
--
LiZhong
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
so much !
- Original Message -
From: Michael B Allen [EMAIL PROTECTED]
To: lizhong [EMAIL PROTECTED]
Cc: kerberos@mit.edu
Sent: Tuesday, September 26, 2006 11:46 PM
Subject: Re: How to use gssapi between a java client and a C server?
On Tue, 26 Sep 2006 22:11:37 +0800
lizhong
) to start the applet?
2.How can I input the username and password? In the java application, this work
is done by token = context.initSecContext(token, 0, token.length), and the
output/input are in the stdio form.
Thank you for any help!
--
LiZhong
Hi all,
As we know, jdk 1.4 and 1.5 have added supports for gssapi.Now I'm trying
to mofidy a java client and a C server for security with gssapi.But when I
tried to establish the security context between the server and the client, I
found that gssapi in java acts differently from gssapi in
Hi all,
I am trying to use gssapi to encrypt a C++ program's data on the
network.But when I used gss_acquire_cred to get the ticket info, the program
crashed.
I wrote a little example to find the reason. This example is test.cxx at
the last of this email. You can simply create your
PROTECTED] is the SPN of the gss-server
- Original Message -
From: lizhong [EMAIL PROTECTED]
To: kerberos@mit.edu
Sent: Friday, August 25, 2006 10:42 AM
Subject: Question about gss-client
Hi all,
I have started gss-server on machine gcnode029, and now I try to start
gss-client on machine
Hi all,
I have started gss-server on machine gcnode029, and now I try to start
gss-client on machine gcnode026.
But I found that everytime I run gss-client with cmd:
[EMAIL PROTECTED] gss-sample]# ./gss-client gcnode029.cap test adde
The gss-server will tell me that :
GSS-API error
.
- Original Message -
From: lizhong [EMAIL PROTECTED]
To: kerberos@mit.edu; Marcus Watts [EMAIL PROTECTED]
Sent: Wednesday, August 23, 2006 10:08 PM
Subject: Re: gss-client error
Thank you for your help!
The machine A: gcnode028, the kdc server
The machine B: gcnode029, where the gss
Hi all,
I used klist to show the principals on my own Linux computer,and got the
result below:
[EMAIL PROTECTED] gss-sample]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: admin/[EMAIL PROTECTED]
Valid starting ExpiresService principal
08/24/06 09:50:02 08/24/06
the name defined in
/etc/host and the DNS name are mixed together somehow.
I searched a lot using google, and found that many people met the same problem
as mine. Hope the method above would help.
- Original Message -
From: lizhong [EMAIL PROTECTED]
To: Michael B Allen [EMAIL PROTECTED
I'm trying to test with gss-client and gss-server but am unsuccessful in
getting it to work.
I have setup a MIT Realm called test.com and added a client named test/[EMAIL
PROTECTED]
I am able to kinit and get a ticket from the KDC.
[EMAIL PROTECTED] gss-sample]# kinit
Password for test/[EMAIL
B Allen [EMAIL PROTECTED]
To: lizhong [EMAIL PROTECTED]
Cc: kerberos@mit.edu
Sent: Monday, August 21, 2006 10:29 PM
Subject: Re: gss-server error
A Kerberos realm is always in uppercase [1]. If you did *everything*
with a lowercase realm name I suspect things might work but perhaps
admin/admin
Authenticating as principal mailto:admin/[EMAIL PROTECTED]
admin/[EMAIL PROTECTED] with password.
Password for mailto:admin/[EMAIL PROTECTED] admin/[EMAIL PROTECTED]:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
Thank you for any help!
--
LiZhong
!
--
Lizhong
lizhong mailto:[EMAIL PROTECTED] @ncic.ac.cn
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
16 matches
Mail list logo