Re: Using Smartcard with PK-INIT does not respond

2009-03-05 Thread Loren M. Lang
On Wed, 2009-03-04 at 12:11 -0600, John Hascall wrote: Mar 04 07:04:13 server krb5kdc[18148](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.1.237: KDC_RETURN_PADATA: u...@example.com for krbtgt/example@example.com, Cannot allocate memory There is no memory crunch on the

Re: Using Smartcard with PK-INIT does not respond

2009-03-05 Thread Kevin Coffman
On Wed, Mar 4, 2009 at 7:40 PM, Loren M. Lang lor...@alzatex.com wrote: On Wed, 2009-03-04 at 12:16 -0500, Kevin Coffman wrote: On Wed, Mar 4, 2009 at 10:24 AM, Loren M. Lang lor...@alzatex.com wrote: On Wed, 2009-03-04 at 06:33 -0800, Loren M. Lang wrote: This symlinks point to missing

Re: Using Smartcard with PK-INIT does not respond

2009-03-05 Thread Loren M. Lang
On Wed, 2009-03-04 at 12:16 -0500, Kevin Coffman wrote: On Wed, Mar 4, 2009 at 10:24 AM, Loren M. Lang lor...@alzatex.com wrote: On Wed, 2009-03-04 at 06:33 -0800, Loren M. Lang wrote: This symlinks point to missing certificates that have nothing to do with the pki

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Kevin Coffman
On Wed, Mar 4, 2009 at 1:49 AM, Loren M. Lang lor...@north-winds.org wrote: I am trying to enable smartcard logins to a MIT Kerberos domain using the recent PK-INIT preauth plugin.  I am using Ubuntu 8.10 with it's stock Kerberos 1.6.4 packages except for pkinit.so recompiled with -DDEBUG.  I

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Loren M. Lang
On Wed, 2009-03-04 at 08:46 -0500, Kevin Coffman wrote: On Wed, Mar 4, 2009 at 1:49 AM, Loren M. Lang lor...@north-winds.org wrote: I am trying to enable smartcard logins to a MIT Kerberos domain using the recent PK-INIT preauth plugin. I am using Ubuntu 8.10 with it's stock Kerberos 1.6.4

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Douglas E. Engert
Loren M. Lang wrote: I am trying to enable smartcard logins to a MIT Kerberos domain using the recent PK-INIT preauth plugin. I am using Ubuntu 8.10 with it's stock Kerberos 1.6.4 packages except for pkinit.so recompiled with -DDEBUG. Be careful here. If you renamed the old pkinit.so and

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Loren M. Lang
On Wed, 2009-03-04 at 06:33 -0800, Loren M. Lang wrote: This symlinks point to missing certificates that have nothing to do with the pki infrastructure I am using, but once I moved the symlinks out of the way, kinit continued and finally sent out an AS-REQ with the PK-INIT preauth

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Loren M. Lang
On Wed, 2009-03-04 at 06:33 -0800, Loren M. Lang wrote: On Wed, 2009-03-04 at 08:46 -0500, Kevin Coffman wrote: On Wed, Mar 4, 2009 at 1:49 AM, Loren M. Lang lor...@north-winds.org wrote: I am trying to enable smartcard logins to a MIT Kerberos domain using the recent PK-INIT preauth

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread Kevin Coffman
On Wed, Mar 4, 2009 at 10:24 AM, Loren M. Lang lor...@alzatex.com wrote: On Wed, 2009-03-04 at 06:33 -0800, Loren M. Lang wrote: This symlinks point to missing certificates that have nothing to do with the pki infrastructure I am using, but once I moved the symlinks out of the way,

Re: Using Smartcard with PK-INIT does not respond

2009-03-04 Thread John Hascall
Mar 04 07:04:13 server krb5kdc[18148](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.1.237: KDC_RETURN_PADATA: u...@example.com for krbtgt/example@example.com, Cannot allocate memory There is no memory crunch on the server. After a quick glance at the code, I don't see where

Using Smartcard with PK-INIT does not respond

2009-03-03 Thread Loren M. Lang
I am trying to enable smartcard logins to a MIT Kerberos domain using the recent PK-INIT preauth plugin. I am using Ubuntu 8.10 with it's stock Kerberos 1.6.4 packages except for pkinit.so recompiled with -DDEBUG. I have a server certificate installed on the KDC with the extended key usage