Re: KDC 1.15 startup error: Invalid credentials - while initializing database

2017-04-14 Thread Jaap Winius
Quoting "Pallissard, Matthew" : > Is it slapd reading its key tab incorrectly or is the hostname being > derived incorrectly.  Is this a host file issue? IMO, this is slapd not reading its key table, as the host file does not give information about the Kerberos principal needed for authenti

Which gss calls may block on IO

2017-04-14 Thread Isaac Boukris
Hello, If I only acquire credentials for krb5 mech, can I assume that gss_accpet would not block on IO? Is there any information available on which gss calls may block on IO and which not? Thanks! Kerberos mailing list Kerberos@mit.edu ht

Re: Which gss calls may block on IO

2017-04-14 Thread Greg Hudson
On 04/14/2017 08:26 AM, Isaac Boukris wrote: > If I only acquire credentials for krb5 mech, can I assume that > gss_accpet would not block on IO? I think that's true, assuming the keytab and profile and /etc/gss/mech file aren't on a network filesystem. In the future we might have pluggable keyta

Re: kerberos error setup on mac

2017-04-14 Thread Greg Hudson
On 04/13/2017 11:56 PM, ronald rodriguez wrote: > Thanks Emma! > > I have installed the kerberos5 using macport, just wonder if you can still > able to help me to figure out which is the right kdc.conf being read by the > system. I just tried these files: The default location of kdc.conf is in

Re: Which gss calls may block on IO

2017-04-14 Thread Isaac Boukris
On Fri, Apr 14, 2017 at 6:53 PM, Greg Hudson wrote: > On 04/14/2017 08:26 AM, Isaac Boukris wrote: >> If I only acquire credentials for krb5 mech, can I assume that >> gss_accpet would not block on IO? > > I think that's true, assuming the keytab and profile and /etc/gss/mech > file aren't on a ne

Re: Which gss calls may block on IO

2017-04-14 Thread Simo Sorce
On Fri, 2017-04-14 at 22:15 +0300, Isaac Boukris wrote: > On Fri, Apr 14, 2017 at 6:53 PM, Greg Hudson wrote: > > On 04/14/2017 08:26 AM, Isaac Boukris wrote: > >> If I only acquire credentials for krb5 mech, can I assume that > >> gss_accpet would not block on IO? > > > > I think that's true, ass

Re: kerberos error setup on mac

2017-04-14 Thread Ronald Gmail
Thanks Greg! I did not use the configue option instead i just followed the instruction given by Emma. I just used sudo port install kerberos5. I'll try to copy the files krb5.conf and kdc.conf to the default path see if the port will listen to the port i specified in the config. Thank you,