[22500] in Kerberos
Re: Kadmin GSS-API Error
daemon@ATHENA.MIT.EDU (Kevin Coffman)
Fri Sep 17 17:59:09 2004
To: Tom Yu <tlyu@mit.edu>
In-Reply-To: Message from Tom Yu <tlyu@MIT.EDU>
<ldvmzzo1t67.fsf@cathode-dark-space.mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Fri, 17 Sep 2004 17:56:35 -0400
From: Kevin Coffman <kwc@citi.umich.edu>
Message-Id: <20040917215635.43BA91BB00@citi.umich.edu>
cc: kerberos@mit.edu
cc: Kevin Coffman <kwc@citi.umich.edu>
Errors-To: kerberos-bounces@mit.edu
> >>>>> "lyzhang" == Lynn Zhang <lyzhang@umich.edu> writes:
>
> lyzhang> The kadmin from 1.2.8 wrote information to the log,
> lyzhang> Sep 17 17:02:47 Request: kadm5_init, admabcd/admin@LAUGUAGE.UMICH.ED
> U,
> lyzhang> success,
> lyzhang> client=admabcd/admin@LSA.UMICH.EDU, service=kadmin/admin@LAUGUAGE.UM
> ICH.EDU,
> lyzhang> addr=141.211.X.X
>
> lyzhang> The one from 1.3.4 did not write any information to the log.
>
> Interesting. Did you see any logs from krb5kdc for an AS_REQ from the
> 1.3.4 client that failed? I assume you see an AS_REQ logged from the
> 1.2.8 client.
>
> ---Tom
The 1.2.8 servers Lynn is running against have our MD5 hack.
I took this out in the 1.3 code.
Lynn sent me this output:
>This one works,
> Sep 17 17:39:54 AS_REQ (1 etypes {1}) 141.211.67.94(88): ISSUE: authtime
> 1095457194, etypes {rep=1 tkt=1 ses=1}, admlynn/admin@LSA.UMICH.EDU for
> kadmin/admin@LSA.UMICH.EDU
>This one do not,
> Sep 17 17:40:28 AS_REQ (3 etypes {16 3 1}) 141.211.67.94(88): ISSUE:
> authtime 1095457228, etypes {rep=3 tkt=1 ses=3},
> admlynn/admin@LSA.UMICH.EDU for kadmin/admin@LSA.UMICH.EDU
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
