[3260] in Kerberos
correction to last mesg.
daemon@ATHENA.MIT.EDU (ari@ISI.EDU)
Thu May 12 12:52:45 1994
Date: Thu, 12 May 1994 09:37:43 -0700
From: ari@ISI.EDU
To: kerberos@MIT.EDU
Sorry, had a couple of errors in the last message, here it is again:
to get v4 services working with v5 server beta 3 (at least krlogind) :
1. the v4 service (example krlogind) has to be
registered with k5 server as host/<machine name without the domain
for example isi.edu >@ISI.EDU
Don't use "rcmd" since the kdc does a look
up in the database and automatically converts rcmd into
"host" via the krb5_425_conv_principal function.
2. in /nfs/gost/kerberos/isibeta3+/sun4/appl/bsd/krlogind.c
#ifdef KRB5_KRB4_COMPAT
#define SERVE_V4
#endif
has to be moved bellow this block since config.h included in
krb5.h contains the definition of KRB5_KRB4_COMPAT
#include <krb5/krb5.h>
#include <krb5/osconf.h>
#include <krb5/asn1.h>
#include <krb5/crc-32.h>
#include <krb5/mit-des.h>
#include <krb5/los-proto.h>
#include <kerberosIV/krb.h>
3. in krb5_compat_recvauth call on line 1435 "rcmd" should be
changed to host since the key in srvtab is for host due to 1.
4. In addition it helps to remove this line:
#ifdef SERVE_V4
if (auth_sys == KRB5_RECVAUTH_V4) {
fatal(netf, "This server does not support Kerberos V4");
}
#endif
===================================
Also if any one had a problem with telnet not forwarding credentials:
credentials were not being forwarded for the -f -F options:
The problem was that the last couple of bytes of the message
containing the credentials were being dropped on the receiver side (telnetd)
This is due to the fact that the receiving buffer was only 512 bytes
where as the incoming message was a few bytes larger.
solution: in file /appl/telnet/telnetd/state.c on line 53 bump up
the size of subbufer from 512 to larger size (ex. 1024 or 2048)
-Ari ari@isi.edu
