[4943] in Kerberos
4.4 kpasswd screw (WAS Re: CNS clients and BSDI servers)
daemon@ATHENA.MIT.EDU (Thor Lancelot Simon)
Fri Apr 7 22:09:57 1995
To: kerberos@MIT.EDU
Date: 7 Apr 1995 23:53:30 GMT
From: tls@cloud9.net (Thor Lancelot Simon)
In article <3m4hr7$gnq@grump.uu.net>,
Timothy G. Smith <tgsmith@uunet.uu.net> wrote:
>Is anyone out there successfully running the CNS clients with a BSDI
>1.1 server? We are trying to with mixed results. Our environment
>consists of Suns running 4.1.X and pentiums running BSDI 1.1. The
>BSDI boxes are the kdc. telnet, rlogin, and most clients work fine.
>Our problem is with kpasswd.
I just posted a question about this. Your problem results from the
kpasswd service running on different ports in 4.4BSD/BSDI Kerberos IV and
"traditional" Kerberos IV such as CNS.
I'll be damned if I know why this is. A quick test indicated that changing
the services entry for kpasswd on the Kerberos server did *not* work, so
the services probably run on incompatible ports because they're, well,
incompatible.
I found the release version of CNS to have serious instabilities when run
under NetBSD -- I don't know about BSDI. I initially fixed this by
rebuilding the BSD kerb libraries with all the paths changed to fit with
CNS, and then linking CNS against them instead of against the kerb
libraries from CNS. Note that CNS's des library is fine, and
substantially faster than the BSD one in many cases. I eventually fixed
this by running all of the BSD kerberos, patched to use the CNS paths,
but using the CNS kadmind, since 4.4 Kerberos has no kadmind. This way,
the BSD kpasswdd wasn't needed -- though I guess I could have run both if
I had to, each on its own port.
I do not understand a number of things about the 4.4BSD kerberos. The
primary one is why it doesn't use the "right" port for kpasswd. The
absolutely most perplexing one, however, is that it's missing the source
to kpasswdd! I have a BSDI source license, and yet installing Kerberos
got me a kpasswdd binary but no kpasswdd source, which I also don't
understand.
I would love it if someone would shed some light on this whole mess.
--
Thor Lancelot Simon tls@cloud9.net
Somewhere they're meeting on a pinhead, calling you an angel.
