[30034] in Kerberos
guidance
daemon@ATHENA.MIT.EDU (naveen.bn)
Fri Jun 27 08:45:16 2008
Message-ID: <4864E025.8040702@globaledgesoft.com>
Date: Fri, 27 Jun 2008 18:12:13 +0530
From: "naveen.bn" <naveen.bn@globaledgesoft.com>
MIME-Version: 1.0
To: kevin <kwc@umich.edu>
Content-Type: multipart/mixed; boundary="----=neXtPaRt_1214569993"
Cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
------=neXtPaRt_1214569993
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hi Kevin,
I am facing a problem and would like to get suggestion from you regarding it .
My seniors had come up with a kerberos client which took the reference from krb5-1.2.2, which was with out PKINIT support and they
had added the PKINIT support for it. I have no contact with them , I have no idea what server they had used.
But, now that the krb5-1.6.3 supports PKINIT, I am trying to use it as Server . My client works without PKINIT, but with PKINIT
support the server (krb5-1.6.3) is not able to decode AS_REQ packet and the kdc log says
preauth (pkinit) verify failure: ASN.1 identifier doesn't match expected value.
I tested the AS_REQ with the tool dumpasn1.c, I found no problem in pkinit asn1 dump.
Kindly help me in solving this problem
Thank you
naveen
------=neXtPaRt_1214569993
Content-Type: text/plain;
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message.Global Edge Software Ltd has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. Global Edge Software Ltd reserves the right to monitor and review the content of all messages sent to or from this e-mail address
------=neXtPaRt_1214569993
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
------=neXtPaRt_1214569993--
