[36057] in Kerberos
Re: Native kinit core dump on Solaris with newer KDC
daemon@ATHENA.MIT.EDU (John Devitofranceschi)
Sun Apr 20 16:40:42 2014
From: John Devitofranceschi <foonon@gmail.com>
Message-Id: <B0E29E62-FA2C-4829-B60B-42B5810DC5EC@gmail.com>
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
Date: Sun, 20 Apr 2014 09:57:26 -0400
To: kerberos@mit.edu
In-Reply-To: <E4845E7E-FD07-46E4-AA82-BC1A7BBBDCA5@gmail.com>
Content-Type: multipart/mixed; boundary="===============1702116141=="
Errors-To: kerberos-bounces@mit.edu
--===============1702116141==
Content-Type: multipart/signed;
boundary="Apple-Mail=_14946B9B-4A46-4399-8420-9CCC31EFA2F2";
protocol="application/pkcs7-signature"; micalg=sha1
--Apple-Mail=_14946B9B-4A46-4399-8420-9CCC31EFA2F2
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On Apr 20, 2014, at 9:40 AM, John Devitofranceschi <foonon@gmail.com> =
wrote:
>=20
> After we upgraded our KDC from 1.8.2 to 1.11.3, we found that the =
older Solaris systems' native kinit started core dumping.
>=20
> Initially, the clients have no default entypes defined, or they might =
have des-cbc-crc and des3-cbc-sha1 defined.
>=20
> The core dumps stop when we define des-cbc-crc as the only default =
enctype in the clients' krb5.conf files.=20
>=20
> Any ideas about what might have changed between 1.8.2 and 1.11.3? =20
>=20
> Is there any way to undo it in the configuration of the KDC?
>=20
> jd
This seems to be a known problem:
Ticket #7714 Kerberos 1.11 incompatibility with some Solaris 10 systems
So, never mind.
jd=
--Apple-Mail=_14946B9B-4A46-4399-8420-9CCC31EFA2F2--
--===============1702116141==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1702116141==--
