Problem with pam_krb5

2014-05-26 Thread Christian Stroehmeier
Hi everyone, we have a setup with 1+ users, using kerberos mostly for ssh authentication. This works fine for several years now, but we recently ran into a problem with pam_krb5. We upgraded our terminal server to debian wheezy (was squeeze before), and since then sshd sometimes consumes 1

Re: Problem with pam_krb5

2014-05-26 Thread Greg Hudson
On 05/26/2014 05:23 AM, Christian Stroehmeier wrote: > The process polls a udp socket pointing at the kerberos master's port > 88, thus generating this load. I think this is most likely issue #7454, which was fixed in krb5 1.10.4. (Wheezy has 1.10.1.) http://krbdev.mit.edu/rt/Ticket/Display

Re: Problems parsing old krbPrincipalKey attributes from LDAP backend

2014-05-26 Thread Frank Steinberg
Am 25.05.2014 um 05:14 schrieb Greg Hudson : > If you decide to go with patching the KDC, the candidate fixes are here: > > https://github.com/krb5/krb5/pull/129 > > These changes should get pushed to master within a week or so, and > will eventually make their way into 1.12 and probably 1.11 p

Which port must be opened on a Firewall for Kerberos?

2014-05-26 Thread csanyipal
Hi, my home server get his static address from my ISP with DHCP to specific MAC address of the eth0. So, it seems that, that I'm behind a firewall of my ISP. Which ports must be opened on a firewall ( on firewall of my ISP, or on firewall of mine ), so I can reach my Kerberos server on my home s

Re: Which port must be opened on a Firewall for Kerberos?

2014-05-26 Thread Kenneth MacDonald
On Mon, 2014-05-26 at 15:22 +0200, csanyi...@gmail.com wrote: > Hi, > > my home server get his static address from my ISP with DHCP to specific > MAC address of the eth0. > > So, it seems that, that I'm behind a firewall of my ISP. > > Which ports must be opened on a firewall ( on firewall of my