[2839] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos

daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Tue Oct 5 23:06:59 1993

Date: Tue, 5 Oct 93 22:55:52 EDT
From: tytso@MIT.EDU (Theodore Ts'o)
To: myhu@vnet.IBM.COM
Cc: kerberos@MIT.EDU
In-Reply-To: myhu@vnet.IBM.COM's message of Thu, 23 Sep 93 14:24:38 EDT,

   Date: Thu, 23 Sep 93 14:24:38 EDT
   From: myhu@vnet.IBM.COM

       I got Kerberos files from "pub/lerberos/dist/921209". I installed
   Kerberos at our system and I have a problem on it that I cannot resolved.
   The problem is that when I type "kinit" for an initial ticket, the Kerberos
   accepted whatever password   I typed. I checked the ticket file under
   "/tmp".  I found out that Kerberos return me a ticket even when I
   typed a wrong password.

       I don't know what is wrong with Kerberos. If you can give me any
   suggestion, I will be much appreciated.

I don't know.  I suspect those tickets won't actually work for any
services that you try using.  What system are you compiling this for?
Have you actually tried using these tickets for any services (like the
simple server or the sample server demos)?  Did you perhaps accidentally
#define NO_ENCRYPTION?

You really haven't given enough information to accurately diagnose the
problem.  (The last is a strong possibility; and it means that you
aren't actually using the "Kerberos" protocol, but the "Bones" protocol;
the "Bones" protocol has all of the DES calls stripped out, and so it
provides no security whatsoever --- it is used for allowing something
with the Kerberos API to be exported outside of the U.S.)

							- Ted


home help back first fref pref prev next nref lref last post