[1684] in Kerberos
Problem with MIT Kerberized "MH"
daemon@ATHENA.MIT.EDU (Jamey Maze)
Fri Dec 27 15:37:24 1991
Date: 27 Dec 91 19:59:33 GMT
From: jnm@tdum.ctd.ornl.gov (Jamey Maze)
To: kerberos@shelby.Stanford.EDU
I've been working with the MIT Project Athena modifications to MH 6.7,
which add Hesiod and Kerberos support to MH. I think I'm very close
to getting this code to work, but could use some help in figuring out
an error I'm getting. Here's a transcript of what I'm seeing on my
workstation (tdum) when I try to fetch mail from the server (gryphon).
tdum% kdestroy
Tickets destroyed.
tdum% kinit
MMES Kerberos Service (tdum)
Kerberos Initialization for "jnm1"
Password:
tdum% klist
Ticket file: /tmp/tkt9999
Principal: jnm1@ORNL.GOV
Issued Expires Principal
Dec 27 14:33:02 Dec 27 22:33:02 krbtgt.ORNL.GOV@ORNL.GOV
tdum% inc -norpop
Password (gryphon:jnm1):
inc: -ERR Kerberos authentication failure: Can't decode authenticator (krb_rd_req)
tdum% klist
Ticket file: /tmp/tkt9999
Principal: jnm1@ORNL.GOV
Issued Expires Principal
Dec 27 14:33:02 Dec 27 22:33:02 krbtgt.ORNL.GOV@ORNL.GOV
Dec 27 14:33:10 Dec 27 22:33:10 kpop.gryphon@ORNL.GOV
tdum%
I'm a bit confused as to why inc prompts for a password.
Here's the log I get from "popperk" (MIT Kerberized version of
Berkeley popper 1.7):
tdum.CTD.ORNL.GOV: (v1.7k) Servicing request at 128.219.128.54
Tracing session and debugging information in file "/usr/adm/POPdebug"
tdum.CTD.ORNL.GOV: (.@) Can't decode authenticator (krb_rd_req)
Here's the Kerberos log which shows that it gave me a kpop ticket:
27-Dec-91 14:33:40 Initial ticket request Host: 128.219.128.54 User:
"jnm1" ""
27-Dec-91 14:33:55 APPL Request jnm1.@ORNL.GOV on 128.219.128.54 for
kpop.gryphon
Here's the options I configured MH with:
version: MH 6.7.1 #5[UCI] (gryphon) of Fri Dec 27 13:59:40 EST 1991
options: [ATZ] [BERK] [BIND] [BSD42] [BSD43] [FOLDPROT='"0700"']
[HESIOD] [KPOP] [MHRC] [MSGPROT='"0600"'] [OVERHEAD]
[POPSERVICE='"kpop"'] [RPATHS] [SBACKUP='"#"'] [SUN40]
[TYPESIG='void'] [WHATNOW] [ZONEINFO] [SENDMTS] [SMTP] [POP]
[SPRINTFTYPE=int]
I'll keep looking to see if I can figure out what the problem is. If
you have an idea, please drop me an e-mail.
Thanks!
--
Jamey Maze | Computing & Telecommunications Division
Oak Ridge National Lab | Advanced Technology Group
P.O. Box 2008, MS-6238 | Internet: jnm@ornl.gov
Oak Ridge, TN 37831-6238 | 615/574-6355, FAX 615/574-9646
"Years ago my mother said to me, 'In this world, Elwood, you must
be oh so smart or oh so pleasant.' For years I was smart. I
recommend pleasant." - Elwood P. Dowd, "Harvey"
