[5083] in Kerberos

home help back first fref pref prev next nref lref last post

Kerberos 5 beta 4-3 on SGI Indy

daemon@ATHENA.MIT.EDU (Jon 'Iain' Boone)
Thu May 4 18:07:40 1995

Date: Thu,  4 May 1995 17:52:28 -0400 (EDT)
From: "Jon 'Iain' Boone" <boone@prep.net>
To: kerberos@MIT.EDU

Folks,

  I would like to thank you all for the help you've volunteered.
Especially to John Studarius@psc.edu, who volunteered the
use of another machine to try it from.

  Here's an update:

  I've been running the krb5kdc on the LINUX machine.

  I was able to get the kinit program to work by inserting some 
debugging code in the krb5 library (in os and krb subdirectories).

  Here's some things that I think are bad about how it
works on the SGI:

1) The initial request for a tgt is only given 1 second for a response,
after which another request is sent with 1 second timeout.  After
those two, two are sent with 4 second timeouts, then two with 16
second timeouts.  After the last request, one of the 6 responses 
that were sent is decrypted and then installed in the cache.

This behavior is certainly broken and I'm in the process of figuring
out why it does this and how to stop it.

2)  All of the changes I made were conditioned with:
#ifdef DEBUG
#endif
    and I don't do any condition testing in my debug
code.  Yet, this seems sufficient to get the program
to actually interpret the responses that the kdc is
so obviously sending.

*sigh*

/***************************************************************/
/*  Jon 'Iain' Boone  Senior Network Engineer  boone@prep.net  */
/*  (412) 268-7874    PREPnet                  iain+@cmu.edu   */
/***************************************************************/

home help back first fref pref prev next nref lref last post