[32345] in Kerberos
Re: problem with pam_krb5 4.2-1
daemon@ATHENA.MIT.EDU (Russ Allbery)
Fri May 14 18:37:16 2010
From: Russ Allbery <rra@stanford.edu>
To: Rohit Kumar Mehta <rohitm@engr.uconn.edu>
In-Reply-To: <4BEDCFA4.7050102@engr.uconn.edu> (Rohit Kumar Mehta's message of
"Fri, 14 May 2010 18:33:08 -0400")
Date: Fri, 14 May 2010 15:37:12 -0700
Message-ID: <878w7myusn.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: "Mehta, Rohit" <rohit@engr.uconn.edu>,
"kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Rohit Kumar Mehta <rohitm@engr.uconn.edu> writes:
> I think the best (and most secure) practice would be to regenerate all
> the keytabs and the trust, so I'll tackle it next week.
Okay, yes, that's true. :)
I suspect that the problem is that the intermediate KDC is rejecting the
cross-realm authentication because the cross-realm ticket is DES.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
