Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-08-03 Thread Todd Grayson
Ah good to know about, thanks! On Mon, Aug 3, 2015 at 5:18 AM, John Devitofranceschi j...@optonline.net wrote: On Jul 29, 2015, at 5:46 PM, Todd Grayson tgray...@cloudera.com wrote: Hi, Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-08-03 Thread John Devitofranceschi
On Jul 29, 2015, at 5:46 PM, Todd Grayson tgray...@cloudera.com wrote: Hi, Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around allowing environments drift to where a KDC would be on a later release than the clients? There was this one:

Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Todd Grayson
Hi, Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around allowing environments drift to where a KDC would be on a later release than the clients? There seems to be a change in default behavior in the 1.12+ where renewable tickets must be specifically

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Ken Hornstein
Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around allowing environments drift to where a KDC would be on a later release than the clients? FWIW, we run a whole bunch of crazy versions of Kerberos, and generally there is not an interoperability

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Todd Grayson
Actually the krbtgt got generated without a renewable life value (was at 0), missed this during the troubleshooting, so nothing other than the need to express renew lifetime properly in the configuration. Thanks tho for the feedback. On Wed, Jul 29, 2015 at 8:06 PM, Ken Hornstein

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Todd Grayson
Interesting, I'll take a look, thanks! On Wed, Jul 29, 2015 at 8:12 PM, Benjamin Kaduk ka...@mit.edu wrote: On Wed, 29 Jul 2015, Ken Hornstein wrote: Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around allowing environments drift to where a KDC

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Benjamin Kaduk
On Wed, 29 Jul 2015, Ken Hornstein wrote: Is there any general wisdom out there about mixed KDC/Client versions? Are there concerns around allowing environments drift to where a KDC would be on a later release than the clients? FWIW, we run a whole bunch of crazy versions of Kerberos, and