[23451] in Kerberos
Re: Kerberos Digest, Vol 26, Issue 29
daemon@ATHENA.MIT.EDU (Henry B.Hotz)
Fri Feb 25 19:23:01 2005
In-Reply-To: <200502251703.j1PH3JhA025649@pch.mit.edu>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <91cb497f2cf2f24f57ce6c23e3e34d32@oxy.edu>
Content-Transfer-Encoding: 7bit
From: "Henry B.Hotz" <hbhotz@oxy.edu>
Date: Fri, 25 Feb 2005 16:22:13 -0800
To: kerberos@mit.edu
X-MailScanner-From: hbhotz@oxy.edu
cc: "Douglas E.Engert" <deengert@anl.gov>
Errors-To: kerberos-bounces@mit.edu
On Feb 25, 2005, at 9:03 AM, kerberos-request@mit.edu wrote:
> Date: Fri, 25 Feb 2005 15:20:33 +0200
> From: Priit Randla <priit.randla@eyp.ee>
> To: "Douglas E. Engert" <deengert@anl.gov>
> Cc: kerberos@mit.edu
> Subject: Re: MIT + Heimdal + openssh == cross realm difficulties
> Message-ID: <421F2621.1080703@eyp.ee>
> In-Reply-To: <42079922.6050808@anl.gov>
> References: <42009547.9070706@eyp.ee> <4200D640.8060504@anl.gov>
> <42039F72.3050004@eyp.ee><42079922.6050808@anl.gov>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 4
> Currently 'almost' all seems to work as expected - I'm so far unable to
> get openssh with pam on Heimdal to save obtained TGT with flags intact
> - TGT gets written but without any flags. I think its got something
> to do with SuSe as doing openssh the other way (from SuSe (heimdal))
> to RedHat(mit)) tgt gets saved with
> all required flags intact.
>
> Regards,
> Priit
You may need:
[libdefaults]
fcc-mit-ticketflags = true
on the Heimdal 0.6.3 side if you are mixing Heimdal and MIT/Sun. This
is default for Heimdal 0.7 snapshots now. Not sure how far back the
option is available.
------------------------------------------------------------------------
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
