[22885] in Kerberos
Re: How to Force a Kerb 4 Request
daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Tue Nov 23 19:12:38 2004
In-Reply-To: <20041123213247.GK290@yiff.mit.edu>
Mime-Version: 1.0 (Apple Message framework v619)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <755C21BD-3DAD-11D9-BD74-000A95CA746C@jpl.nasa.gov>
Content-Transfer-Encoding: 7bit
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: Tue, 23 Nov 2004 16:11:59 -0800
To: Rachel Elizabeth Dillon <red@mit.edu>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Looks like Heimdal, not MIT. What do you get with "kinit --version"?
(Heimdal will print a version message. MIT will ignore the option and
just try to authenticate you anyway.)
I was looking for an MIT equivalent, which I suspect might not exist.
On Nov 23, 2004, at 1:32 PM, Rachel Elizabeth Dillon wrote:
> From the kinit manpage in the most recent Debian version, which is
> 1.3.x:
>
> OPTIONS
> -5 get Kerberos 5 tickets. This overrides whatever the
> default
> built-in behavior may be. This option may be used with -4
>
> -4 get Kerberos 4 tickets. This overrides whatever the
> default
> built-in behavior may be. This option is only available if
> kinit was built with Kerberos 4 compatibility. This option
> may be used with -5
>
> I don't have a test server for Kerberos 4, but it works fine with my
> MIT
> account. Check your build for Kerberos 4 compatibility?
>
> Best of luck,
>
> -r.
>
> On Tue, Nov 23, 2004 at 01:26:24PM -0800, Henry B. Hotz wrote:
>> It appears that with 1.3.x you can't force it to make a kerberos 4
>> auth
>> request. I've tried putting only info in the [v4 realms]-like
>> sections
>> and disabling the DNS lookup on OSX 10.3, but then a kinit just fails.
>>
>> Is there any MIT equivalent to Heimdal kinit -4?
>>
>> Yes, I know this is a *BAD* idea and you-all hate it. I just have a
>> test case I need to support.
>> ----------------------------------------------------------------------
>> --
>> ----
>> The opinions expressed in this message are mine,
>> not those of Caltech, JPL, NASA, or the US Government.
>> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
>>
>> ________________________________________________
>> Kerberos mailing list Kerberos@mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>
------------------------------------------------------------------------
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
