[23556] in Kerberos
Re: Pam kerberos vs. Kinit
daemon@ATHENA.MIT.EDU (Wyllys Ingersoll)
Fri Mar 18 08:12:45 2005
Message-ID: <423AD34F.4010407@sun.com>
Date: Fri, 18 Mar 2005 08:10:39 -0500
From: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
MIME-Version: 1.0
To: "Douglas E. Engert" <deengert@anl.gov>
In-Reply-To: <4239EDD8.2090401@anl.gov>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Douglas E. Engert wrote:
> >
> > I've just run another test and discovered that I can successfully
> > log into the host initially (via PAM kerberos library and SSH), and
> > I don't get error 52. I've got a ticket in my cache and
> > everything. Kerb error 52 only occurs if I'm using kinit from the
> > shell.
>
>
> You could be right on the cut over point, and maybe addressless vs
> with address tickets keep the ticket just small enough.
When the client does not do pre-authentication, does AD still
send PAC data? I thought it did not, but I'm not certain.
-Wyllys
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
