[22886] in Kerberos
Re: How to Force a Kerb 4 Request
daemon@ATHENA.MIT.EDU (Rachel Elizabeth Dillon)
Tue Nov 23 19:17:29 2004
Date: Tue, 23 Nov 2004 19:16:54 -0500
From: Rachel Elizabeth Dillon <red@mit.edu>
To: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Message-ID: <20041124001654.GN290@yiff.mit.edu>
Mime-Version: 1.0
In-Reply-To: <755C21BD-3DAD-11D9-BD74-000A95CA746C@jpl.nasa.gov>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============43286358299449201=="
Errors-To: kerberos-bounces@mit.edu
--===============43286358299449201==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="aSnC4ZPPfhCvD8sN"
Content-Disposition: inline
--aSnC4ZPPfhCvD8sN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
I'm 99.999% certain this is MIT kerberos.
rachel@meow:~$ kinit --version
kinit: invalid option -- -
kinit: invalid option -- e
Bad lifetime value sion
<usage message snipped>
The manpage came from Debian, but I don't have anything Heimdal installed.
-r.
On Tue, Nov 23, 2004 at 04:11:59PM -0800, Henry B. Hotz wrote:
> Looks like Heimdal, not MIT. What do you get with "kinit --version"? =
=20
> (Heimdal will print a version message. MIT will ignore the option and =
=20
> just try to authenticate you anyway.)
>=20
> I was looking for an MIT equivalent, which I suspect might not exist.
>=20
> On Nov 23, 2004, at 1:32 PM, Rachel Elizabeth Dillon wrote:
>=20
> >From the kinit manpage in the most recent Debian version, which is =20
> >1.3.x:
> >
> >OPTIONS
> > -5 get Kerberos 5 tickets. This overrides whatever the =20
> >default
> > built-in behavior may be. This option may be used with -4
> >
> > -4 get Kerberos 4 tickets. This overrides whatever the =20
> >default
> > built-in behavior may be. This option is only available if
> > kinit was built with Kerberos 4 compatibility. This option
> > may be used with -5
> >
> >I don't have a test server for Kerberos 4, but it works fine with my =20
> >MIT
> >account. Check your build for Kerberos 4 compatibility?
> >
> >Best of luck,
> >
> >-r.
> >
> >On Tue, Nov 23, 2004 at 01:26:24PM -0800, Henry B. Hotz wrote:
> >>It appears that with 1.3.x you can't force it to make a kerberos 4 =20
> >>auth
> >>request. I've tried putting only info in the [v4 realms]-like =20
> >>sections
> >>and disabling the DNS lookup on OSX 10.3, but then a kinit just fails.
> >>
> >>Is there any MIT equivalent to Heimdal kinit -4?
> >>
> >>Yes, I know this is a *BAD* idea and you-all hate it. I just have a
> >>test case I need to support.
> >>----------------------------------------------------------------------=
=20
> >>--
> >>----
> >>The opinions expressed in this message are mine,
> >>not those of Caltech, JPL, NASA, or the US Government.
> >>Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
> >>
> >>________________________________________________
> >>Kerberos mailing list Kerberos@mit.edu
> >>https://mailman.mit.edu/mailman/listinfo/kerberos
> >>
> ------------------------------------------------------------------------=
=20
> ----
> The opinions expressed in this message are mine,
> not those of Caltech, JPL, NASA, or the US Government.
> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
>=20
--aSnC4ZPPfhCvD8sN
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBo9L2rAG/UVUP/b0RAjuOAJ9rDsjdFfZDqD/k4G/2TW7Cd5HatQCfaJ9J
tRpYM0LyyTHa3yNSnXY3+Y4=
=wgWx
-----END PGP SIGNATURE-----
--aSnC4ZPPfhCvD8sN--
--===============43286358299449201==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============43286358299449201==--
