Regarding MIT KDC server setup

2014-10-29 Thread Baghel, Gaurav
Hi MIT Team, I am doing setup for MIT KDC on solaris machine. I searched a lot over internet, but couldn't find any appropriate doc for the KDC setup. Request you to please give me all the steps or link to setup MIT KDC over solaris. Also on one of the KDC I am getting below error:- bash-3.00#

Does /etc/krb5.conf have to be present and identical on all Kerberos infrastructure participants?

2014-10-29 Thread Rufe Glick
Hello, I'm trying to understand the inner workings of Kerberos here. The following question has arisen: Does /etc/krb5.conf have to be present and indentical on all Kerberos infrastructure participants? Here is what I deduced based on reading Linux man pages and other source on the Interne

msktutil under new management

2014-10-29 Thread Ken Dreyer
Hi all, I've accepted a new job at Red Hat working with the Ceph engineering team, and I'll be leaving USGS on October 31. Since my work on msktutil was related to my job at USGS, I'm stepping down as a maintainer on the project. (This isn't a request from my new employer - it's just that my wife

Re: Does /etc/krb5.conf have to be present and identical on all Kerberos infrastructure participants?

2014-10-29 Thread Russ Allbery
Rufe Glick writes: > I'm trying to understand the inner workings of Kerberos here. The > following question has arisen: Does /etc/krb5.conf have to be present > and indentical on all Kerberos infrastructure participants? No, not really. All participants should probably agree on some things, suc

Re: Does /etc/krb5.conf have to be present and identical on all Kerberos infrastructure participants?

2014-10-29 Thread Nico Williams
On Wed, Oct 29, 2014 at 3:39 PM, Russ Allbery wrote: > Rufe Glick writes: >> I'm trying to understand the inner workings of Kerberos here. The >> following question has arisen: Does /etc/krb5.conf have to be present >> and indentical on all Kerberos infrastructure participants? > > No, not really

Why k5srvutil is present when ktutil can do its job?

2014-10-29 Thread Rufe Glick
Hello, Machine configuration: Linux Cent OS 7, MIT Kerberos 5, client side Kerberos package is krb5-workstation v1.11.3. Kerberos 5 client side package supplied me with two similar utilities: ktutil and k5srvutil. I believe that there is no operation that k5srvutil script does that ktutil can'

Re: Why k5srvutil is present when ktutil can do its job?

2014-10-29 Thread Greg Hudson
On 10/29/2014 07:14 PM, Rufe Glick wrote: > Kerberos 5 client side package supplied me with two similar utilities: ktutil > and k5srvutil. I believe that there is no operation that k5srvutil script > does that ktutil can't do. So why do package maintainers keep both of them? There is no ktutil e