[1774] in Kerberos

home help back first fref pref prev next nref lref last post

ksrvtgt sanity check...

daemon@ATHENA.MIT.EDU (Michael Busby)
Wed Feb 26 17:03:50 1992

Date: 26 Feb 92 20:17:59 GMT
From: mcb@xwin.eng.hou.compaq.com (Michael Busby)
To: kerberos@shelby.Stanford.EDU

We are having a problem with ksrvtgt.  Given the following:

1. On the master kerberos server we make a 'machine_name-new-srvtab' file using
'ext_srvtab -n machine_name'.  We put this file on 'machine_name'.

2. On machine_name we copy machine_name-new-srvtab to /etc/srvtab as root.

3. As root, we execute 'ksrvtgt rcmd machine_name', we get 'Password incorrect'.

We originally used 'kdb_edit' to put rcmd.machine_name@OUR_REALM in the
master database with a RANDOM password.  All kerberized network utilities
using /etc/srvtab work fine.

We also noticed that there is a bug in ksrvtgt in that the 'krb_get_lrealm'
call has the wrong arguments.  If your KRB_REALM value does not match your
local realm in /etc/krb.conf, it dumps core.  The original call was:

	krb_get_lrealm(realm)

It should be:

	krb_get_lrealm(realm, 1)

If anyone has information about ksrvtgt that we are missing I would
appreciate any help you could give.

Thanks,


Michael C. Busby - Systems Engineer
----------------------------------------------------------------------
Compaq Computer Corporation        |  Internet: mcb@compaq.com        
P.O. Box 692000 m/s 050701         |  Uunet:    uunet!cpqhou!michaelb 
Houston, Texas, USA 77269-2000     |  Phone:    713-374-5638          
----------------------------------------------------------------------
All views and opinions expressed are my own and do not represent the
views and opinions of Compaq Computer Corporation.

home help back first fref pref prev next nref lref last post