Re: MS KRB5 vs KRB 5 GSS API/SPNEGO question

2014-09-26 Thread Prakash Narayanaswamy
e /var/tmp/host_1000: File exists. * Why does this happen? The problem, however, does seems to resolve itself. Prakash Prakash N | 408 771 4273 On Tue, Feb 4, 2014 at 11:15 AM, Prakash Narayanaswamy wrote: > Greg, the patch that you gave us fixed the issue. Thanks for the prompt > debug

A quick question on using kinit

2014-11-24 Thread Prakash Narayanaswamy
Greg, We've a keytab file (test.keytab) with keytab entries of the form shown below pointing to a Windows host joined to a AD domain (DOMAINNAME.COM) KVNO Timestamp Principal - 1 11/21/14 14:25:56 host/hostna

MS KRB5 vs KRB 5 GSS API/SPNEGO question

2014-02-03 Thread Prakash Narayanaswamy
Hello, We are trying to get a service (a SMB server) running on Linux kerberized using the GSS API. During the negotiation (SPNEGO), the Windows SMB client specifies MS KRB5 (1.2.840.48018.1.2.2) as the preferred mechanism and supplies the initial token. The gss_accept_sec_context method on the ser

Re: MS KRB5 vs KRB 5 GSS API/SPNEGO question

2014-02-03 Thread Prakash Narayanaswamy
Thanks a lot, Greg. We'll take the patch, apply it, test it and get back to you. Thanks again. Prakash Prakash N | 408 771 4273 On Mon, Feb 3, 2014 at 6:31 PM, Greg Hudson wrote: > On 02/03/2014 02:26 PM, Prakash Narayanaswamy wrote: > > Hello, We are trying to get a service

Re: MS KRB5 vs KRB 5 GSS API/SPNEGO question

2014-02-04 Thread Prakash Narayanaswamy
Greg, the patch that you gave us fixed the issue. Thanks for the prompt debugging and a quick patch. Prakash On Mon, Feb 3, 2014 at 6:53 PM, Prakash Narayanaswamy wrote: > Thanks a lot, Greg. We'll take the patch, apply it, test it and get back > to you. Thanks again.

On getting the subkey from EncAPRepPart

2014-02-05 Thread Prakash Narayanaswamy
Hi everyone, Working towards kerberizing a SMB server (running on Linux), we've progressed past mutual authentication and are now working on providing security services using the GSS API. In particular, we are currently focusing on generating and validating the MACs -- I mean on signing the SMB me

On acceptor credentials.

2014-02-19 Thread Prakash Narayanaswamy
Folks, While testing the kerberized SMB server, we observed the following: Even if the *gss_acquire_cred* method is passed *both* the service name and host name in the form *service@hostname* for the *desired_name* parameter, the hostname part is ignored during authentication. This observation see

Re: On acceptor credentials.

2014-02-20 Thread Prakash Narayanaswamy
http://krbdev.mit.edu/rt/Ticket/Display.html?id=7858>* Can you please clarify? Thanks a lot Prakash N | 408 771 4273 On Wed, Feb 19, 2014 at 9:17 PM, Greg Hudson wrote: > On 02/19/2014 10:19 PM, Prakash Narayanaswamy wrote: > > While testing the kerberized SMB server, we observ