[38314] in Kerberos

home help back first fref pref prev next nref lref last post

compile KDC with KKDCP support

daemon@ATHENA.MIT.EDU (Jim Shi)
Mon Aug 27 19:47:49 2018

Date: Mon, 27 Aug 2018 23:47:28 +0000 (UTC)
From: Jim Shi <hjshi@yahoo.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <958677580.4688082.1535413648636@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

I have another questions.
to compile KDC with kkdcp support, do I need pass in any special flag(s)? 
Or kkdcp is supported by default in recent code?
The reason I ask this question, is that when I run a test: (I do have kdc = https://.... configured for the realm). It does not seem to make https connection to the  server. Here is the trace log:

host:~/test/bin] kdct$ env KRB5_TRACE=/dev/stdout ./kinit xxx@***

init module "encrypted_timestamp", pa_type 2, flag 1

init module "encrypted_challenge", pa_type 138, flag 1

pkinit_init_plg_crypto: initializing openssl crypto context at 0x1c829e0

pkinit_client_plugin_init: returning plgctx at 0x1c67b40

init module "pkinit", pa_type 17, flag 1

init module "pkinit", pa_type 16, flag 1

init module "pkinit", pa_type 15, flag 1

init module "pkinit", pa_type 14, flag 1

init module "pkinit", pa_type 147, flag 130

pkinit_init_req_crypto: returning ctx at 0x1c67770

pkinit_init_identity_crypto: returning ctx at 0x1c84210

pkinit_client_req_init: returning reqctx at 0x1c67730

get_plugin_data_sym(service_locator)

kinit: Cannot contact any KDC for realm 'APPLECONNECT.APPLE.COM' while getting initial credentials

pkinit_client_plugin_fini: got plgctx at 0x1c67b40
Jim
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post