[38314] in Kerberos
compile KDC with KKDCP support
daemon@ATHENA.MIT.EDU (Jim Shi)
Mon Aug 27 19:47:49 2018
Date: Mon, 27 Aug 2018 23:47:28 +0000 (UTC)
From: Jim Shi <hjshi@yahoo.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <958677580.4688082.1535413648636@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
I have another questions.
to compile KDC with kkdcp support, do I need pass in any special flag(s)?
Or kkdcp is supported by default in recent code?
The reason I ask this question, is that when I run a test: (I do have kdc = https://.... configured for the realm). It does not seem to make https connection to the server. Here is the trace log:
host:~/test/bin] kdct$ env KRB5_TRACE=/dev/stdout ./kinit xxx@***
init module "encrypted_timestamp", pa_type 2, flag 1
init module "encrypted_challenge", pa_type 138, flag 1
pkinit_init_plg_crypto: initializing openssl crypto context at 0x1c829e0
pkinit_client_plugin_init: returning plgctx at 0x1c67b40
init module "pkinit", pa_type 17, flag 1
init module "pkinit", pa_type 16, flag 1
init module "pkinit", pa_type 15, flag 1
init module "pkinit", pa_type 14, flag 1
init module "pkinit", pa_type 147, flag 130
pkinit_init_req_crypto: returning ctx at 0x1c67770
pkinit_init_identity_crypto: returning ctx at 0x1c84210
pkinit_client_req_init: returning reqctx at 0x1c67730
get_plugin_data_sym(service_locator)
kinit: Cannot contact any KDC for realm 'APPLECONNECT.APPLE.COM' while getting initial credentials
pkinit_client_plugin_fini: got plgctx at 0x1c67b40
Jim
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
