[23512] in Kerberos
Re: joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux
daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Sat Mar 12 18:05:01 2005
In-Reply-To: <200503041701.j24H14hA028696@pch.mit.edu>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <62df8582f458229b4e0d0ab80b8ccd7d@jpl.nasa.gov>
Content-Transfer-Encoding: 7bit
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: Thu, 10 Mar 2005 23:53:47 -0800
To: kerberos@mit.edu
cc: vvk@smartlogic.ru
Errors-To: kerberos-bounces@mit.edu
On Mar 4, 2005, at 9:01 AM, kerberos-request@mit.edu wrote:
> Date: 4 Mar 2005 04:17:04 -0800
> From: "KV2" <vvk@smartlogic.ru>
> To: kerberos@MIT.EDU
> Subject: joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux
> (krb5-1.3.5) error
> Message-ID: <1109938624.607189.31710@z14g2000cwz.googlegroups.com>
> Precedence: list
> Message: 7
>
> Hello, I get following errors when trying set up kerberos on netbsd
> 1.6.1 system:
> netb# kadmin
> kadmin> list princs
> root/admin@SWAMP.RU's Password:
> ---if wrong password given, it prints "get princs: Incorrect
> password"and give up,
> if the password matches than kadmin sleep forever on READ call,
> (from ktrace/kdump output)...
The authentication and password change protocols are standard. The
admin protocol isn't. You can't use a Heimdal kadmin with an MIT
kadmind.
> Configuration of realm is simple: main kdc on linux with MIT
> krb5-1.3.5, there are some other linux system on net, successfuly
> using kerberos in auth to telnet, ftp services, /etc/krb5.conf on
> systems are exactly identical.
>
> Is it version incompability or config error? What should I do - I
> think install mit krb on this system surely help, but is there other
> ways, some people told me that heimdal totally compatible with MIT, is
> it right?
"on the wire" the basic authentication protocol is very compatible.
Not sure how far back the password change compatibility works.
Generally you should have no problems with a NetBSD/Heimdal client and
an MIT server (as I think you are trying).
Note that the Heimdal in NetBSD 1.6.1 is fairly old. Version
0.5-something at best, while they are working on 0.7 now.
> I'am almost totally new in using kerberos, any help appreciated.
>
> Thanks in advance :-)
> Vladimir.
>
------------------------------------------------------------------------
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos