about the old tag kdc_supported_enctypes in kdc.conf

2014-10-13 Thread Giuseppe Mazza
Dear All, It seems to me that the tag kdc_supported_enctypes is not used in the file kdc.conf anymore: root@ubuntu1404:~# aptitude show krb5-kdc | grep Version Version: 1.12+dfsg-2ubuntu5.2 root@ubuntu1404:~# zcat /usr/share/man/man5/kdc.conf.5.gz | grep supported_enctypes .B \fBsupported_

No mention of _kerberos TXT in RFCs / but we have DNSSEC now

2014-10-13 Thread Rick van Rein
Hello, Most of us know about the practice of the _kerberos TXT records in DNS; this can help to translate a servername to a REALM name, which is especially helpful if we want to crossover to other realms. This is coded into MIT krb5, and I bet many of our domains implement it. A grep on my RF

Re: documentation on how to set $KRB5CCNAME for kerberized/gssapi applications

2014-10-13 Thread Natxo Asenjo
On Fri, Oct 10, 2014 at 12:28 AM, Tom Yu wrote: > Natxo Asenjo writes: > >> When implementing rsyslog with gssapi >> (http://www.rsyslog.com/doc/gssapi.html) I came accross the issue >> that the rsyslog software expects the credentials cache of the host >> principal in /tmp/krb5cc_0; the centos

Re: documentation on how to set $KRB5CCNAME for kerberized/gssapi applications

2014-10-13 Thread Natxo Asenjo
hi, problem solved. This was indeed a replay cache file. Using a true ccache one solved the issue. Thanks for your assistance. -- groet, natxo Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: about the old tag kdc_supported_enctypes in kdc.conf

2014-10-13 Thread Greg Hudson
On 10/13/2014 06:45 AM, Giuseppe Mazza wrote: > It seems to me that the tag kdc_supported_enctypes is not used in the > file kdc.conf anymore: [...] > I had that tag in the configuration of my old kerberos server, but I > have not added it in the new one. >From a look at our version history, the

Keberos faling in windows 7 as Kerberos Client

2014-10-13 Thread Ambati, Satyanand
I have a scenarios where IE sends a Kerberos request to the Datapower appliance (where I have uploaded the keytab file to decryt the token) . if I use windows XP as a Kerberos client everything works well I was able to see the Kerberos token in Datapower. If I send the request from WINDOWS 7 I d