[30878] in Kerberos
Re: SASL authentication
daemon@ATHENA.MIT.EDU (=?ISO-8859-1?Q?Michael_Str=F6der?=)
Tue Mar 17 15:14:05 2009
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
Date: Tue, 17 Mar 2009 13:19:57 +0100
Message-ID: <d4h496-tvf.ln1@nb2.stroeder.com>
Mime-Version: 1.0
X-Complaints-To: usenet-abuse@t-online.de
In-Reply-To: <mailman.115.1237256662.14058.kerberos@mit.edu>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Xu, Qiang (FXSGSC) wrote:
>> -----Original Message-----
>> From: kerberos-bounces@mit.edu
>> [mailto:kerberos-bounces@mit.edu] On Behalf Of Michael Str?der
>> Sent: Monday, March 16, 2009 7:18 PM
>> To: kerberos@mit.edu
>> Subject: Re: SASL authentication
>>
>> Try with obtaining the TGT with 'kinit -A <principal>'. I
>> vaguely remember that this solved some problems for me.
>
> What should the <principle> be? In my case, suppose the user to be authentcated is "qxu", with password "abcdefg".
Something like <username>@<REALM>. E.g. "qxu@MIT.EDU" (without the quotes).
> Btw, from searching the web, it seems "82 Local error" may arises
> from the lacking of a keytab file. But should the keytab file in the
> server, or in the client? How to create a keytab file in Windows
> server 2003?
First try to do a kinit with providing the password. After that you
could try using keytab files (on your LDAP client) if needed in your setup.
Ciao, Michael.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
