[22404] in Kerberos
Re: BC-SNC, MIT Kerberos V, SSO, GSS-API v2
daemon@ATHENA.MIT.EDU (Calin Barbat)
Wed Sep 8 07:33:25 2004
Message-ID: <413ED18E.7020703@osram.de>
Date: Wed, 08 Sep 2004 11:31:58 +0200
From: Calin Barbat <c.barbat@osram.de>
MIME-Version: 1.0
To: Calin Barbat <c.barbat@osram.de>
In-Reply-To: <413EC492.5000707@osram.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
cc: cevat.guersoy@avinci.de
Errors-To: kerberos-bounces@mit.edu
Hi,
I finally succeeded in running both combinations: sserver/sclient and
gss-server/gss-client.
Thanks for your great support,
Calin.
Calin Barbat wrote:
> Hello,
>
> Norbert, you were right. I just tried to play around (locally) with the
> sserver/sclient from krb5-1.3.4/src/appl/sample and I got the following
> messages:
>
> In /var/log/messages something like:
> sserver: recvauth failed--Software caused connection abort
>
> And from sclient:
> connected
> ./sclient: Ticket expired while using sendauth
>
> I used following commands:
>
> ./sserver -p 8888 -s host/<myhost>.<mydomain2>.<mydomain1>.de -S
> /etc/krb5.keytab
>
> and
>
> ./sclient <myhost>.<mydomain2>.<mydomain1>.de 8888
> host/<myhost>.<mydomain2>.<mydomain1>.de
>
> Any idea about the cause of this behaviour?
>
> Calin.
>
> Norbert Klasen wrote:
>
> > some hints you might want to try:
> > - use MIT Kerberos 1.3.x. It implements the native Windows enctype
> > arcfour-hmac-md5 and supports TCP to connect to the KDC. (unlikely)
> > - test if you can successfully establish a GSSAPI connection between
> your
> > Windows workstation and your Unix server with gss-client and gss-server
> > (Windows versions are included in the KfW package).
> >
> > Norbert
> >
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
