Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-08-03 Thread Todd Grayson
Ah good to know about, thanks! On Mon, Aug 3, 2015 at 5:18 AM, John Devitofranceschi wrote: > > > On Jul 29, 2015, at 5:46 PM, Todd Grayson wrote: > > > > Hi, > > > > Is there any general wisdom out there about mixed KDC/Client versions? > Are > > there concerns around allowing environments dri

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-08-03 Thread John Devitofranceschi
> On Jul 29, 2015, at 5:46 PM, Todd Grayson wrote: > > Hi, > > Is there any general wisdom out there about mixed KDC/Client versions? Are > there concerns around allowing environments drift to where a KDC would be > on a later release than the clients? > There was this one: http://krbdev.m

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Todd Grayson
Interesting, I'll take a look, thanks! On Wed, Jul 29, 2015 at 8:12 PM, Benjamin Kaduk wrote: > On Wed, 29 Jul 2015, Ken Hornstein wrote: > > > >Is there any general wisdom out there about mixed KDC/Client versions? > Are > > >there concerns around allowing environments drift to where a KDC woul

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Todd Grayson
Actually the krbtgt got generated without a renewable life value (was at 0), missed this during the troubleshooting, so nothing other than the need to express renew lifetime properly in the configuration. Thanks tho for the feedback. On Wed, Jul 29, 2015 at 8:06 PM, Ken Hornstein wrote: > >Is t

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Benjamin Kaduk
On Wed, 29 Jul 2015, Ken Hornstein wrote: > >Is there any general wisdom out there about mixed KDC/Client versions? Are > >there concerns around allowing environments drift to where a KDC would be > >on a later release than the clients? > > FWIW, we run a whole bunch of crazy versions of Kerberos

Re: Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

2015-07-29 Thread Ken Hornstein
>Is there any general wisdom out there about mixed KDC/Client versions? Are >there concerns around allowing environments drift to where a KDC would be >on a later release than the clients? FWIW, we run a whole bunch of crazy versions of Kerberos, and generally there is not an interoperability pro