[23530] in Kerberos
Kerb error 52
daemon@ATHENA.MIT.EDU (Ethan Bearman)
Tue Mar 15 13:04:43 2005
Date: Tue, 15 Mar 2005 10:03:41 -0800
From: Ethan Bearman <ebearman@usc.edu>
To: kerberos@mit.edu
Message-id: <6.2.1.2.2.20050315095310.020553f0@email.usc.edu>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
Errors-To: kerberos-bounces@mit.edu
I'm getting kerberos error 52 when I try to kinit from hp-ux (11.0 running
on 9000 series system) to our Windows 2003 AD domain. It works for certain
admin accounts that have few group memberships, but not for regular users.
I understand this to be due to the large PAC headers Windows is using for
authorization data, which causes Windows to use TCP rather than
UDP. Apparently versions of MIT kerberos earlier than 1.3.1 do not support
TCP.
HP no longer supports hp-ux 11.0, so their updated (1.3.5) kerberos client
is for 11i only. Will kerberos 1.4 work properly on hp-ux 11.0? I read
the install instructions from MIT, and have attempted to compile only the
client binaries, but when I executed the steps outlined, I got a lot of
compiler errors of the sort:
cpp: "../../include/k5-thread.h", line 33: error 4036: Can't open include
file 'autoconf.h'.
cpp: "../../include/k5-thread.h", line 398: warning 2013: Unknown
preprocessing directive.
Can someone offer some help on compiling the client only on hp-ux? Which
compiler, etc.? Or is there a pre-compiled distribution for hp-ux 11.0?
Many thanks.
Ethan Bearman
Systems Analyst
USCard Operations
University of Southern California
213.821.2287
213.740.7253 Fax
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
