Why does this happen?

2006-10-18 Thread lizhong
Hello all, I left the kdc server running for the whole night, and this morning I found the kdc server has already been down. The reason for this is that the /var/log/krb5kdc.log file beacame too large, over 2G. I deleted it and started the server again, and the log file was like this: Oct

How to use the useFirstPass option of Krb5LoginModule

2006-10-09 Thread lizhong
Hi all, The useFirstPass option is mentioned here: http://java.sun.com/j2se/1.5.0/docs/guide/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html As follows: The Krb5LoginModule also recognizes the following additional Configuration options that enable you to

How to use gssapi in java applet?

2006-09-29 Thread lizhong
of Krb5LoginModule, and develop my own LoginModule for java applet? Thank you for any help! -- LiZhong Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: How to use gssapi between a java client and a C server?

2006-09-27 Thread lizhong
so much ! - Original Message - From: Michael B Allen [EMAIL PROTECTED] To: lizhong [EMAIL PROTECTED] Cc: kerberos@mit.edu Sent: Tuesday, September 26, 2006 11:46 PM Subject: Re: How to use gssapi between a java client and a C server? On Tue, 26 Sep 2006 22:11:37 +0800 lizhong

How to use gssapi in java applet?

2006-09-27 Thread lizhong
) to start the applet? 2.How can I input the username and password? In the java application, this work is done by token = context.initSecContext(token, 0, token.length), and the output/input are in the stdio form. Thank you for any help! -- LiZhong

How to use gssapi between a java client and a C server?

2006-09-26 Thread lizhong
Hi all, As we know, jdk 1.4 and 1.5 have added supports for gssapi.Now I'm trying to mofidy a java client and a C server for security with gssapi.But when I tried to establish the security context between the server and the client, I found that gssapi in java acts differently from gssapi in

C++ program crash when using gss_acquire_cred

2006-09-16 Thread lizhong
Hi all, I am trying to use gssapi to encrypt a C++ program's data on the network.But when I used gss_acquire_cred to get the ticket info, the program crashed. I wrote a little example to find the reason. This example is test.cxx at the last of this email. You can simply create your

Re: Question about gss-client

2006-08-26 Thread lizhong
PROTECTED] is the SPN of the gss-server - Original Message - From: lizhong [EMAIL PROTECTED] To: kerberos@mit.edu Sent: Friday, August 25, 2006 10:42 AM Subject: Question about gss-client Hi all, I have started gss-server on machine gcnode029, and now I try to start gss-client on machine

Question about gss-client

2006-08-24 Thread lizhong
Hi all, I have started gss-server on machine gcnode029, and now I try to start gss-client on machine gcnode026. But I found that everytime I run gss-client with cmd: [EMAIL PROTECTED] gss-sample]# ./gss-client gcnode029.cap test adde The gss-server will tell me that : GSS-API error

Re: gss-client error

2006-08-23 Thread lizhong
. - Original Message - From: lizhong [EMAIL PROTECTED] To: kerberos@mit.edu; Marcus Watts [EMAIL PROTECTED] Sent: Wednesday, August 23, 2006 10:08 PM Subject: Re: gss-client error Thank you for your help! The machine A: gcnode028, the kdc server The machine B: gcnode029, where the gss

Questions about The content of klist

2006-08-23 Thread lizhong
Hi all, I used klist to show the principals on my own Linux computer,and got the result below: [EMAIL PROTECTED] gss-sample]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: admin/[EMAIL PROTECTED] Valid starting ExpiresService principal 08/24/06 09:50:02 08/24/06

Re: gss-server error

2006-08-22 Thread lizhong
the name defined in /etc/host and the DNS name are mixed together somehow. I searched a lot using google, and found that many people met the same problem as mine. Hope the method above would help. - Original Message - From: lizhong [EMAIL PROTECTED] To: Michael B Allen [EMAIL PROTECTED

gss-server error

2006-08-21 Thread lizhong
I'm trying to test with gss-client and gss-server but am unsuccessful in getting it to work. I have setup a MIT Realm called test.com and added a client named test/[EMAIL PROTECTED] I am able to kinit and get a ticket from the KDC. [EMAIL PROTECTED] gss-sample]# kinit Password for test/[EMAIL

Re: gss-server error

2006-08-21 Thread lizhong
B Allen [EMAIL PROTECTED] To: lizhong [EMAIL PROTECTED] Cc: kerberos@mit.edu Sent: Monday, August 21, 2006 10:29 PM Subject: Re: gss-server error A Kerberos realm is always in uppercase [1]. If you did *everything* with a lowercase realm name I suspect things might work but perhaps

kadmin: GSS-API (or Kerberos) error while initializing kadmin interface

2006-07-20 Thread lizhong
admin/admin Authenticating as principal mailto:admin/[EMAIL PROTECTED] admin/[EMAIL PROTECTED] with password. Password for mailto:admin/[EMAIL PROTECTED] admin/[EMAIL PROTECTED]: kadmin: GSS-API (or Kerberos) error while initializing kadmin interface Thank you for any help! -- LiZhong

My question when setting up a application server of kerberos

2006-07-19 Thread lizhong
! -- Lizhong lizhong mailto:[EMAIL PROTECTED] @ncic.ac.cn Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos