RE: Need info on Kerberos configuration with AES SHA2

2015-01-03 Thread Prashanth Marampally
Thank you so much Ben. I really appreciate your help. -Original Message- From: Benjamin Kaduk [mailto:ka...@mit.edu] Sent: Saturday, January 03, 2015 2:15 AM To: Prashanth Marampally Cc: kerberos@mit.edu Subject: Re: Need info on Kerberos configuration with AES SHA2 On Fri, 2 Jan 2015

Need info on Kerberos configuration with AES SHA2

2015-01-02 Thread Prashanth Marampally
Hi, I am naive to kerberos. Would like to know whether or not can we configure kerberos 5 with AES SHA2. If yes, please guide me with some articles, documentations etc. Thanks for your help in advance. Thanks, Prashanth Kerberos mailing list

Re: Need info on Kerberos configuration with AES SHA2

2015-01-02 Thread Benjamin Kaduk
On Fri, 2 Jan 2015, Prashanth Marampally wrote: Hi, I am naive to kerberos. Would like to know whether or not can we configure kerberos 5 with AES SHA2. If yes, please guide me with some articles, documentations etc. Currently, you cannot. There is a draft proposal for how such a

Reg. Kerberos configuration on Novell server...

2013-02-28 Thread gopalakrishnan.kumar
Hi, Greetings! We have query regarding Kerberos configuration for Novell e-directory server. When we browsed through internet we got this email address. We have configured Novell e-directory on SUSE LINUX ENTERPRISE SERVER. Please find our queries below: 1. We have configured krb5kdc

FW: Reg. Kerberos configuration on Novell server...

2013-02-27 Thread saurabh.singh5
Hi, Greetings! We have query regarding Kerberos configuration for Novell e-directory server. When we browsed through internet we got this email address. We have configured Novell e-directory on SUSE LINUX ENTERPRISE SERVER. Please find our queries below: 1. We have configured krb5kdc

Kerberos configuration issue

2011-07-20 Thread Rusanov, Dmitry
Hello, Can i post here some configuration issue? Best regards Dmitry Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Same config as server: kinit(v5): Improper format of Kerberos configuration file...

2008-12-22 Thread Mathew Rowley
I am trying to set up a server for kerberos authentication, but when I copy my krb5.conf file over to the server, I get the following error while trying to do a kinit: kinit(v5): Improper format of Kerberos configuration file while initializing Kerberos 5 library The only difference I can see

Re: Same config as server: kinit(v5): Improper format of Kerberos configuration file...

2008-12-22 Thread Ken Raeburn
On Dec 22, 2008, at 12:06, Mathew Rowley wrote: I am trying to set up a server for kerberos authentication, but when I copy my krb5.conf file over to the server, I get the following error while trying to do a kinit: kinit(v5): Improper format of Kerberos configuration file while

Re: Best Practice: Location of Kerberos Configuration Files for use with Vista and Server 2008

2008-01-27 Thread Danny Mayer
Jeffrey Altman wrote: Due to the increased security provided by Vista and Server 2008 and the directory shadowing provided by the Wow64 environment, it is no longer acceptable to store application configuration files in either \WINDOWS or \Program Files directory trees. The proper location

Best Practice: Location of Kerberos Configuration Files for use with Vista and Server 2008

2008-01-26 Thread Jeffrey Altman
Due to the increased security provided by Vista and Server 2008 and the directory shadowing provided by the Wow64 environment, it is no longer acceptable to store application configuration files in either \WINDOWS or \Program Files directory trees. The proper location to store such files is

Re: kerberos configuration

2007-01-30 Thread Christopher D. Clausen
scotty adams [EMAIL PROTECTED] wrote: Hi Christopher, Actually i need the SEAM Can you also pass me a full KDC configuration? No, I cannot. I suggest that you read the Sun Docs on SEAM: http://docs.sun.com/app/docs/doc/816-5164 And please reply to the list, not to me directly. CDC

Re: Kerberos Configuration

2004-07-29 Thread Gururaj
Hi Douglas, Sorry couldn't reply to your reply because of internet access problem. Thanks that was really a nice reference link. But in that link every thing is about interoperatibility(Unix and MIT Kerberos) Let me elaborate about my problem. My Domain controller machine is a windows server

Re: Kerberos Configuration

2004-07-29 Thread Douglas E. Engert
Gururaj wrote: Hi Douglas, Sorry couldn't reply to your reply because of internet access problem. Thanks that was really a nice reference link. But in that link every thing is about interoperatibility(Unix and MIT Kerberos) Let me elaborate about my problem. My Domain controller

Re: Kerberos Configuration

2004-07-23 Thread Sam Hartman
Gururaj == Gururaj [EMAIL PROTECTED] writes: Gururaj Default realm: testmachine.com (NT Domain) Failed to Gururaj create kerberos key: 5 (0x5) Gururaj Do I need to configure any thing for key Distribution Gururaj Center (KDC) before I run KSetup? No. In fact, you need to

Re: Kerberos Configuration

2004-07-23 Thread Douglas E. Engert
Gururaj wrote: Hi, I need to setup a Kerberos Authentication to execute some test cases. Basically I need to configure my Domain control for kerberos authenticataion. And a client box which authenticates thro kerberos, for this I guess I need to run KSetup on the client machine.

Kerberos Configuration

2004-07-22 Thread Gururaj
Hi, I need to setup a Kerberos Authentication to execute some test cases. Basically I need to configure my Domain control for kerberos authenticataion. And a client box which authenticates thro kerberos, for this I guess I need to run KSetup on the client machine. This is what I did... 1. Set

Re: Kerberos configuration with external DNS server.

2004-05-27 Thread Douglas E. Engert
sam wrote: Hi, does anyone know why I get the following error: [EMAIL PROTECTED] [10:56am] [~]# kinit tillman [EMAIL PROTECTED]'s Password: kinit: krb5_get_init_creds: unable to reach any KDC in realm ROCK.COM [EMAIL PROTECTED] [10:57am] [~]# I have written the following kerberos

Re: Kerberos configuration with external DNS server.

2004-05-27 Thread Dan
Shouldnt a CNAME point to a real host? ie not an address? On Fri, 2004-05-28 at 11:58, sam wrote: kerberosCNAME 192.168.1.1 Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Kerberos configuration with external DNS server.

2004-05-27 Thread sam
Douglas E. Engert wrote: sam wrote: Hi, does anyone know why I get the following error: [EMAIL PROTECTED] [10:56am] [~]# kinit tillman [EMAIL PROTECTED]'s Password: kinit: krb5_get_init_creds: unable to reach any KDC in realm ROCK.COM [EMAIL PROTECTED] [10:57am] [~]# I have written the

Where are Kerberos configuration/credentials stored in a Windows ActiveDirectory environment?

2004-04-28 Thread Sleepy
I'm attempting to use Java's implementation of Kerberos in a Windows ActiveDirectory environment. I have discovered that it appears that Java and Windows each handle Kerberos configurations and credentials independently. For example, Java appears to store its credentials cache in c:\documents

RE: Where are Kerberos configuration/credentials stored in a Windows ActiveDirectory environment?

2004-04-28 Thread Actually davidchr
are Kerberos configuration/credentials stored in a Windows ActiveDirectory environment? I'm attempting to use Java's implementation of Kerberos in a Windows ActiveDirectory environment. I have discovered that it appears that Java and Windows each handle Kerberos configurations

Re: Where are Kerberos configuration/credentials stored in a Windows

2004-04-28 Thread Jeffrey Altman
If you wish to utilize the Microsoft LSA obtained credentials with Java Kerberos you should use the JAAS Login Provider. Note this provider in JRE 1.4.2 is broken on Windows XP. The JRE 1.5 version should work. Sleepy wrote: I'm attempting to use Java's implementation of Kerberos in a

Kerberos configuration file

2004-02-26 Thread Matthias Haslbeck
I'm trying to configure Kerberos for use with Oracle9i Database through ASO (Advanced Security Option) and Windows 2000 Server with Active Directory. When trying to get the initial ticket with the okinit utility there's always the error message: Improper format of configuration file. So i reviewed

Re: Kerberos configuration file

2004-02-26 Thread Thomas A. La Porte
specifies whether the new MIT Kerberos configuration format is used. If the value is set to TRUE, it will parse the file according to the new configuration format rules. When the value is set to FALSE, the default (non-MIT) configuration is used. The default is FALSE. ++ This may