[1795] in Kerberos

home help back first fref pref prev next nref lref last post

Wrong principal

daemon@ATHENA.MIT.EDU (Wally Strzelec)
Thu Mar 5 14:46:49 1992

Date: 5 Mar 92 18:49:04 GMT
From: packman@tamsun.tamu.edu (Wally Strzelec)
To: kerberos@shelby.Stanford.EDU


I am trying to bring Kerberos5 up on SunOS 4.1.1 and have run into the
following stumbling block:

On the server side:

  kdb5_edit:  ldb
  entry: sample/helios.tamu.edu@KERBEROS.TAMU.EDU
  entry: K/M@KERBEROS.TAMU.EDU
  entry: telnet/helios.tamu.edu@KERBEROS.TAMU.EDU
  entry: krbtgt/KERBEROS.TAMU.EDU@KERBEROS.TAMU.EDU
  entry: root@KERBEROS.TAMU.EDU
  entry: packman@KERBEROS.TAMU.EDU
  kdb5_edit:  xst helios.tamu.edu sample
  'sample/helios.tamu.edu@KERBEROS.TAMU.EDU' added to keytab 'WRFILE:helios.tamu.edu-new-srvtab'
  kdb5_edit:  q
  helios.tamu.edu# mv helios.tamu.edu-new-srvtab /krb5/v5srvtab
  helios.tamu.edu# krb5kdc &
  /usr/local/src/kerberos5/src/appl/simple/server/sim_server sample
  socket has port # 906
  Received 425 bytes
  sim_server: Wrong principal in request while reading request
  helios.tamu.edu#

On the client side:
  helios.tamu.edu:~ -> /usr/local/src/kerberos5/src/appl/simple/client/sim_client helios
  s_sock.sin_addr is 128.194.15.2
  Local Kerberos realm is KERBEROS.TAMU.EDU
  Kerberos realm #1 of helios is KERBEROS.TAMU.EDU
  Got credentials for sample.
  Sent authentication data: 425 bytes
  Sent checksummed message: 137 bytes
  sim_client: Connection refused while sending PRIV message
  Sent encrypted message: -1 bytes
  helios.tamu.edu:~ ->

If I try the sample server/client, I just get:

  /usr/local/src/kerberos5/src/appl/sample/sclient/sclient helios
  Software caused connection abort while using sendauth
  helios.tamu.edu:~ ->pwd

Putting the simple server up under a debugger I see it mess up in
krb5_principal_compare.  The realm and the principal both compare ok
but then it fails because the two principals didn't run out of
components at the same time.  princ1 is null but princ2 has
"helios.tamu.edu".

Does anyone have any idea's what I might be doing wrong?



        Wally Strzelec
        Texas A&M University
        Unix System Administrator
        packman@tamuts.tamu.edu

home help back first fref pref prev next nref lref last post