URG: Details abt Kerberos

*Hi,* I am new to kerberos, I have been asked to setup KDC, kerberos client and application server. Using these i have to capture AP_REQ, AP_REP, AS_REQ and AS_REP in wireshark. I have two systems both are working on Red Hat Linux. I downloaded Kerberos from MIT version 5. I went through ins

Cannot run rlogind, telnetd

Hi, I want to capture AP_REQ and AP_REP, for that i want to run telnetd, rlogind daemons on my application server. When i run rlogind i will get the following error: * rlogind: Can't get peer name of remote host: Socket operation on non-socket * when i run rsh i get* host unknown

telnet and rlogin error

Hi, I have configured KDC, application server, client as given in the manual and i have created principal vi...@global.com but when i run rlogin and telnet i am getting following error. 1. When i run *rlogin *i am getting following error(Uncommented rlogind in /etc/inetd.conf on

Couldn't authenticate to server

Hi, When i tried to rlogin i am getting following error: *bash-3.1# rlogin 172.16.10.211.global.com Couldn't authenticate to server: Bad sendauth version was sent trying normal rlogin (/usr/bin/rlogin) * /etc/inetd.conf is as follows(commented lines not shown): * time

URG: PKINIT error

Hi all, I am implementing PKINIT. My krb5.conf and kdc.conf are as follows *krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm

PA-PK-AS-REQ missing

Hi all, I am implementing PKINIT, but i am not getting PA-DASS, PA-PK-AS-REQ, PA-PK-AS-REP fields in the reply( KRB5KDC_ERR_PREAUTH_REQUIRED) from KDC. Its asking password to authenticate and sending encrypted time-stamp in the second AS_REQ to KDC, but i want to use certificate based authe

Preauthentication Error

Hi all, I am implementing PKINIT. I have generated certificates using openssl tool, but i am not getting PA-DASS, PA-PK-AS-REQ, PA-PK-AS-REP fields in the reply( KRB5KDC_ERR_PREAUTH_REQUIRED) from KDC. Its asking password to authenticate and sending encrypted time

Invalid signature while getting initial credentials

Hi all, I have enabled PKINIT, but when i try to do kinit -X X509_user_identity=FILE:/client/client.crt,/client/client.key vinay i am getting following error: kinit(v5): Invalid signature while getting initial credentials client.crt and kdc.crt both are signed by ca.key. The method i have adopte

Couldn't authenticate to server

Hi all, I have setup kerberos client, server and application server, but when i try to do rlogin i am getting following error: ***ERROR*** Couldn't authenticate to server: Connection reset by peer *

Subject alternative name issue:INFO

Hi all, I have generated KDC certificate using openssl for PKINIT implementation. Following lines were included in openssl.cnf while generating KDC certificate containing Subject Alternative Extension. # Add id-pkinit-san (pkinit subjectAlternativeName) subjectAltName=otherName:1.3.6.1.5.2.2