[23386] in Kerberos
Re: /usr/lib/gss/gl/mech_krb5.so
daemon@ATHENA.MIT.EDU (Wyllys Ingersoll)
Mon Feb 14 16:13:44 2005
Message-ID: <42111430.5080205@sun.com>
Date: Mon, 14 Feb 2005 16:12:16 -0500
From: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
MIME-Version: 1.0
To: coady <coady@new.com>
In-Reply-To: <42110990.50404@new.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
coady wrote:
> Both the LDAP cient and Kerboros server are running Solaris 8.
> Sun Directory server 5.2.
>
> bash-2.03# klist -ef
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: testadmin/admin@example.com
>
> Valid starting Expires Service principal
> 02/14/05 09:30:57 02/14/05 19:30:57 krbtgt/example.com@example.com
> renew until 02/14/05 09:30:57, Flags: RI
> Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple
> DES cbc mode with HMAC/sha1
OK, this means you are using the MIT Kerberos and not the
Solaris SEAM packages (Solaris 8 SEAM does not recognized 3DES).
However, your "ldapsearch" command is trying to use the Solaris GSSAPI
implementation and will not work with MIT.
If you want to stick with MIT, then you will also need to find LDAP and SASL
tools that work with MIT and not with the native Solaris GSSAPI library
or figure out if the SunDS ldap tools can be configured to use the MIT
GSSAPI library instead of native Solaris.
-Wyllys
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
