[2839] in Kerberos
Re: Kerberos
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Tue Oct 5 23:06:59 1993
Date: Tue, 5 Oct 93 22:55:52 EDT
From: tytso@MIT.EDU (Theodore Ts'o)
To: myhu@vnet.IBM.COM
Cc: kerberos@MIT.EDU
In-Reply-To: myhu@vnet.IBM.COM's message of Thu, 23 Sep 93 14:24:38 EDT,
Date: Thu, 23 Sep 93 14:24:38 EDT
From: myhu@vnet.IBM.COM
I got Kerberos files from "pub/lerberos/dist/921209". I installed
Kerberos at our system and I have a problem on it that I cannot resolved.
The problem is that when I type "kinit" for an initial ticket, the Kerberos
accepted whatever password I typed. I checked the ticket file under
"/tmp". I found out that Kerberos return me a ticket even when I
typed a wrong password.
I don't know what is wrong with Kerberos. If you can give me any
suggestion, I will be much appreciated.
I don't know. I suspect those tickets won't actually work for any
services that you try using. What system are you compiling this for?
Have you actually tried using these tickets for any services (like the
simple server or the sample server demos)? Did you perhaps accidentally
#define NO_ENCRYPTION?
You really haven't given enough information to accurately diagnose the
problem. (The last is a strong possibility; and it means that you
aren't actually using the "Kerberos" protocol, but the "Bones" protocol;
the "Bones" protocol has all of the DES calls stripped out, and so it
provides no security whatsoever --- it is used for allowing something
with the Kerberos API to be exported outside of the U.S.)
- Ted