[23546] in Kerberos
Re: Kerb error 52
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Thu Mar 17 10:19:33 2005
Message-ID: <42399EEF.6090608@anl.gov>
Date: Thu, 17 Mar 2005 09:14:55 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Ethan Bearman <ebearman@usc.edu>
In-Reply-To: <6.2.1.2.2.20050315095310.020553f0@email.usc.edu>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Ethan Bearman wrote:
> I'm getting kerberos error 52 when I try to kinit from hp-ux (11.0
> running on 9000 series system) to our Windows 2003 AD domain. It works
> for certain admin accounts that have few group memberships, but not for
> regular users.
>
> I understand this to be due to the large PAC headers Windows is using
> for authorization data, which causes Windows to use TCP rather than
> UDP. Apparently versions of MIT kerberos earlier than 1.3.1 do not
> support TCP.
>
Correct.
> HP no longer supports hp-ux 11.0, so their updated (1.3.5) kerberos
> client is for 11i only. Will kerberos 1.4 work properly on hp-ux 11.0?
> I read the install instructions from MIT, and have attempted to compile
> only the client binaries, but when I executed the steps outlined, I got
> a lot of compiler errors of the sort:
>
> cpp: "../../include/k5-thread.h", line 33: error 4036: Can't open
> include file 'autoconf.h'.
> cpp: "../../include/k5-thread.h", line 398: warning 2013: Unknown
> preprocessing directive.
>
> Can someone offer some help on compiling the client only on hp-ux?
> Which compiler, etc.? Or is there a pre-compiled distribution for hp-ux
> 11.0?
I have compiled krb5-1.4.0 on 10.20, 11.0, 11i and
IA64 11.23 but done almost no testing.
On 11.0 and 10.20 we added --disable-thread-support and
also added to the CPPFLAGS -D__hpux
This get its to compile but on 11.0 it failes with an
assertion in krb5_libinit.c:line 60
I have not gotten back to see why.
We run krb5-1.3.x on HPs. So one option for now is to run the
last MIT 1.3.5 release on 11.0.
We use gcc-3.3.2 with the vendor's ld.
>
> Many thanks.
>
> Ethan Bearman
> Systems Analyst
> USCard Operations
> University of Southern California
> 213.821.2287
> 213.740.7253 Fax
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
