andrey writes:
> Guys, may I ask if
> http://web.mit.edu/kerberos/krb5-latest/doc/build/doing_build.html way
> of installing kerberos sould work?
Unfortunately, that documentation is "frozen" to the krb5-1.14 release,
and doesn't reflect changes since then.
Documentation such as that located
andrey writes:
> test reply.
Please note that your messages were caught in the moderation queue
because you're not subscribed to the list.
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
>>If I do a ktadd -e des-cbc-crc:normal, it adds only the des key on the
keytab file (as shown by a klist command)
The resulting keytab must be moved from whereever you exported it to the
Config Volume of your netapp filer.
The path and name must be: configvolume/etc/UNIX_krb5.keytab if you use a
Le 25 oct. 2013 à 22:12, Benjamin Kaduk a écrit :
> On Fri, 25 Oct 2013, Frédéric Goudal wrote:
>
>> That's the trail I'm following but with no clear result :
>>
>> After the mount I have the following
>> 25/10/2013 14:07:45 26/10/2013 14:07:44 krbtgt/DO.M@DO.M
>> Etype (skey, tkt): de
On Fri, 25 Oct 2013, Frédéric Goudal wrote:
That's the trail I'm following but with no clear result :
After the mount I have the following
25/10/2013 14:07:45 26/10/2013 14:07:44 krbtgt/DO.M@DO.M
Etype (skey, tkt): des-cbc-crc, aes256-cts-hmac-sha1-96
25/10/2013 14:07:45 26/10/2013 14:0
gure default_tgs_enctypes to only use DES
>
> In fact it works with arcfour as well but Netapp does not support it
> officially.
>
>
>
>
> -Ursprüngliche Nachricht-
> > Von:Frédéric Goudal
> > Gesendet: Fre 25 Oktober 2013 09:17
> > An: Thom
Ok, you are right.
What I did was mount.nfs4 -o sec=krb5
But the correct command is
mount -t nfs -o "vers=4,sec=krb5"
THe result is :
Oct 25 08:47:02 kerberos krb5kdc[2631](info): AS_REQ (2 etypes {16 17})
147.210.18.37: NEEDED_PREAUTH: nfs/client.fq...@ipb.fr for krbtgt/DO.M@DO.M,
Addition
You probably do not mount kerberized at all.
Use "mount -o sec=krb5 ..." or change the clients defaults.
Hth
--
View this message in context:
http://kerberos.996246.n3.nabble.com/Newbie-nfsv4-debian-netapp-tp38752p38761.html
Sent from the Kerberos - General mailing list archive at Nabble.com.
Firoz Allahwali wrote:
> Hi ,
>
> We are a small community college and we have a Windows 2000 network with
> one domain and almost all of our computers are on this domain. Our web
> servers and Database servers are also members of this domain. We were
> looking at SSO and I was wondering if
this error means a missing principal,
try to open the /var/log/krb5kdc.log and check which principal is missing,
simply add it and it will work.
thanks
From: [EMAIL PROTECTED] on behalf of Timo Nentwig
Sent: Mon 12/26/2005 3:41 PM
To: kerberos@mit.edu
Subject: n
Huub wrote:
Hi,
I'm new to kerberos and want to ask this:
I have a no-domain netwerk (just a workgroup) with mostly *nix computers
and have to try-out Kerberos on W2k AS. Any advise on how to do this,
please?
http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp
Michael,
Have a look at the logs on your KDC. You should see the log of
the failure (it should be an UNKNOWN_SERVER error in the KDC
log). Something like the following:
Mar 15 13:54:40 kdc krb5kdc[7230](info): TGS_REQ (7 etypes {23
-133 -128 3 1 24 -135}) x.x.x.x: UNKNOWN_SERVER: authtime
111
In article <[EMAIL PROTECTED]>,
[EMAIL PROTECTED] (Michael Urban) wrote:
...
> The problem comes when I attempt to do the same thing with the same
> version of OpenSSH built with the same options on a Solaris machine.
> In that case, the server logs a "Server not found in Kerberos database"
> mess
Paul Silverman wrote:
> When the TGS issues a ticket to a user to access an application which
> accepts Kerberos as an authentication protocol, what is precisely the
> process to ensure that the ticket is valid and therefore access can be
> granted ?
>
> Does the Kerberized app forward the ticket
On Wed, 9 Feb 2005 at 08:41 (-0800), Paul Silverman wrote:
> When the TGS issues a ticket to a user to access an application which
> accepts Kerberos as an authentication protocol, what is precisely the
> process to ensure that the ticket is valid and therefore access can be
> granted ?
>
> Does t
On Monday, April 12, 2004 08:17:15 -0400 Wyllys Ingersoll
<[EMAIL PROTECTED]> wrote:
Clients do not typically use the keytab file, they either prompt for
name/password and then request initial creds or read the initial
credentials from the user's cache.
True, in most cases. It's perhaps clearer
Gabe wrote:
This same question was asked on 2003-08-14 10:58:14 PST (subject "newbie
question keytab for client or server"), but I don't think it got
answered, so I'm going to ask: the keytab folder in the MIT source code
is only needed for application servers or KDCs, right? There's no need
f
> "benny" == benny B <[EMAIL PROTECTED]> writes:
benny> My question is : can Kerberos alone replace nis or I need
benny> to implement ldap+kerberos ? All stations/Servers are
benny> Linux. Is ther an option form kerberos in nsswitch.conf ?
No, Kerberos does not provide account in
"Tim Alsop" <[EMAIL PROTECTED]> writes:
> If you are using a Symbol Access Point, then the built-in Kerberos support
> in these products will mean that access to the network over 802.11b/g/a will
> require authentication. If correctly configured the Symbol AP can be made to
> only allow access usin
-
From: Ken Raeburn [mailto:[EMAIL PROTECTED]
Sent: 02 February 2004 22:07
To: Bill Amatneek
Cc: [EMAIL PROTECTED]
Subject: Re: Newbie question re: consumer-grade APs
On Monday, Feb 2, 2004, at 13:53 US/Eastern, Bill Amatneek wrote:
> If the drive-by hacker is using a consumer-grade access po
On Monday, Feb 2, 2004, at 13:53 US/Eastern, Bill Amatneek wrote:
If the drive-by hacker is using a consumer-grade access point, will it
be silent and invisible to the Kerberos server? That is, will I have
to monitor the wireless airwaves with probes that listen to R/F
communications in the pro
Not supported by MIT.
Pratibha Gupta wrote:
Hi,
Thanks for all the help so far. Using the makefile that ships with
kerberos for windows 2.5, I was able to build the dll krb5_32.dll (along
with some other dlls and exes). Is there a way to build a static library
version of krb5_32.dll?
Thx
Hi,
Thanks for all the help so far. Using the makefile that ships with
kerberos for windows 2.5, I was able to build the dll krb5_32.dll (along
with some other dlls and exes). Is there a way to build a static library
version of krb5_32.dll?
Thx
Jeffrey Altman wrote on 10/24/2003, 10:24 AM:
Do not download the source for krb5-1.3.1; download the source for
Kerberos for Windows 2.5.
Jeffrey Altman
Pratibha Gupta wrote:
I downloaded the source code for krb5-1.3.1 and followed the
instructions in the README file under krb5-1.3.1/src/windows. Now when I
run nmake on windows, I get th
I downloaded the source code for krb5-1.3.1 and followed the
instructions in the README file under krb5-1.3.1/src/windows. Now when I
run nmake on windows, I get the following error :
Microsoft (R) Program Maintenance Utility Version 6.00.8168.0
Copyright (C) Microsoft Corp 1988-1998. All righ
Download the source code to Kerberos for Windows by following the links
from http://web.mit.edu/kerberos/. Then read the README file.
Pratibha Gupta wrote:
Where can I get instructions to compile the kerberos code on Windows
using MS VC ?
Thanks
_
Hi Florian,
[EMAIL PROTECTED] wrote:
> [want SSH single sign on]
> Does anyone has a glue where to start? Its good possible, that I would like
> to have something which isn't possible the way I like to implement this.
First of all: it is possible to get something you want.
But: Openssh supports t
>
> I want to install LDAP and one of the requirements is to install Kerberos
> and the relevent pam modules as this is an authentication module, Will
this
> upset my /etc/passwd and /etc/shadow authentication that comes with linux
> systems or can I have both systems?
>
You can have both systems
ginal Message -
From: "Jaspreet Singh" <[EMAIL PROTECTED]>
To: "Sreedhar Gupta" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, December 13, 2001 6:14 AM
Subject: RE: newbie in kerberos.
Hi Sreedhar
I also think i've got just the client as util
directory serves as a kdc).. what should i do??
-Original Message-
From: Sreedhar Gupta [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 4:05 PM
To: Jaspreet Singh; [EMAIL PROTECTED]
Subject: RE: newbie in kerberos.
Hi,
What u installed is Kerberos client. I think along with the s
Hi,
What u installed is Kerberos client. I think along with the source they
might have given documentation also. If not, you can use the Unix
documentation for client. You have to edit the krb.con, krb.rlm and hosts
(in winnt\system32/drivers/etc Directory) files.
Mainly you have to specify
1. w
Thanks. It was a path issue.
Jeff
Nicolas Williams wrote:
> setenv LD_LIBRARY_PATH $LD_LIBRARY_PATH:/path/to/krb5libs/
>
> The automake system should add -R/path/to/krb5libs/ to the link commands,
> which would make the above not necessary.
>
> Nico
>
> On Mon, Aug 27, 2001 at 10:47:35PM -0400
setenv LD_LIBRARY_PATH $LD_LIBRARY_PATH:/path/to/krb5libs/
The automake system should add -R/path/to/krb5libs/ to the link commands,
which would make the above not necessary.
Nico
On Mon, Aug 27, 2001 at 10:47:35PM -0400, Jeff Krauss wrote:
> Hi,
>
> I've installed the following krb5-1.0pl1.s
33 matches
Mail list logo
