[2193] in Kerberos
Kinit & kpasswd in kerberosV5 (Sandia dist.)
daemon@ATHENA.MIT.EDU (Davies)
Tue Sep 15 17:25:00 1992
From: bagate!socrates!bbh7rq5 (Davies)
To: kerberos@Athena.MIT.EDU
Date: Tue, 15 Sep 92 13:43:47 EDT
Hello,
I am working on configuring Kerberos V5 (Sandia distribution) and am having
some troubles with kinit and kpasswd. The kdc is up and running and
the database has been initialized and a few users added.
When I run kinit, I get the following:
=======================================================================
kerberos:cdavies$ kinit cdavies
Enter password:
Enter Your SecurId Access Code Prepended with Your PIN
(or a '#'if Your PIN is entered on the card keypad)
or Type return <CR> if You Do NOT Use a SecurId Card:
kinit: Password has expired. Use kpassword to renew.
=======================================================================
I find it strange that it tells me to run "kpassword" instead of "kpasswd".
Then, when I run kpasswd I get:
=======================================================================
kerberos:cdavies$ kpasswd
Old password for cdavies@SOCRATES.BELL-ATL.COM:
Unable to Get Initial Credentials : Program lacks support for key type -17653282
35
Protocol Failure - Password NOT Changed.
=======================================================================
Also, when I first compiled kpasswd and ran it, I got a message:
unknown symbol: _des_string_to_key
So, after looking through the header files, I noticed that des_string_to_key
and mit_des_string_to_key #defined to be the same. So, I changed kpasswd.c
from:
if (retval = des_string_to_key(arg->password.data,
v4_keyptr)) {
to:
if (retval = mit_des_string_to_key(arg->password.data,
v4_keyptr)) {
This seemed to make kpasswd work better. (At least no unknown symbol)
Any help on these errors?
Thanks in advance...
Chris
--
*******************************************************************************
Chris Davies e-mail: cdavies@socrates.bell-atl.com
Bell Atlantic Voice: (301) 989-4111
Fax: (301) 595-1341
Note: If your e-mail reply to me bounces, try sending it explicitly to
cdavies@socrates.bell-atl.com instead of using the 'reply' feature.
******************************************************************************
