[23512] in Kerberos

home help back first fref pref prev next nref lref last post

Re: joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux

daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Sat Mar 12 18:05:01 2005

In-Reply-To: <200503041701.j24H14hA028696@pch.mit.edu>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <62df8582f458229b4e0d0ab80b8ccd7d@jpl.nasa.gov>
Content-Transfer-Encoding: 7bit
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: Thu, 10 Mar 2005 23:53:47 -0800
To: kerberos@mit.edu
cc: vvk@smartlogic.ru
Errors-To: kerberos-bounces@mit.edu


On Mar 4, 2005, at 9:01 AM, kerberos-request@mit.edu wrote:

> Date: 4 Mar 2005 04:17:04 -0800
> From: "KV2" <vvk@smartlogic.ru>
> To: kerberos@MIT.EDU
> Subject: joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux
>  (krb5-1.3.5) error
> Message-ID: <1109938624.607189.31710@z14g2000cwz.googlegroups.com>
> Precedence: list
> Message: 7
>
> Hello, I get following errors when trying set up kerberos on netbsd
> 1.6.1 system:
>  netb#  kadmin
>  kadmin> list princs
>  root/admin@SWAMP.RU's Password:
>  ---if wrong password given, it prints "get princs: Incorrect
> password"and give up,
>      if the password matches than kadmin sleep forever on  READ call,
> (from ktrace/kdump output)...

The authentication and password change protocols are standard.  The  
admin protocol isn't.  You can't use a Heimdal kadmin with an MIT  
kadmind.

>  Configuration of realm is simple: main kdc on linux with MIT
> krb5-1.3.5, there are some other linux system on net, successfuly
> using kerberos in auth to telnet, ftp services, /etc/krb5.conf on
> systems are exactly identical.
>
>  Is it version incompability or config error?  What should I do - I
> think install mit krb on this system surely help, but is there other
> ways, some people told me that heimdal totally compatible with MIT, is
> it right?

"on the wire" the basic authentication protocol is very compatible.   
Not sure how far back the password change compatibility works.   
Generally you should have no problems with a NetBSD/Heimdal client and  
an MIT server (as I think you are trying).

Note that the Heimdal in NetBSD 1.6.1 is fairly old.  Version  
0.5-something at best, while they are working on 0.7 now.

>   I'am almost totally new in using kerberos, any help appreciated.
>
>    Thanks in advance :-)
>   Vladimir.
>
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post