[5311] in Kerberos

home help back first fref pref prev next nref lref last post

Re: forwarding tickets problem

daemon@ATHENA.MIT.EDU (Michael Helm)
Thu Jun 1 17:35:29 1995

To: kerberos@MIT.EDU
Date: 1 Jun 1995 21:17:15 GMT
From: mike@fionn.lbl.gov (Michael Helm)
Reply-To: mike@fionn.lbl.gov (Michael Helm)

Wolfgang Rupprecht writes:
>mike@ux5.lbl.gov (Mike Helm) writes:
>>Kerberos 5 Beta 5, SunOS 413u1b, gcc 263.

>I got the forwardable tickets to work after installing a jumbo patch

Thanks, this bit got the forwarding portion working, in part.
Having finished building on Solaris & motivated by a posting
Doug Engert made to another list, I made another pass at trying
to use forwarded tickets.  Using the 2 system types available
to me (Solaris 2.4, & the above-mentioned 413u1b), I can
forward from host1 to host2, but any connections from host2
to host3, any combo (solaris-sun, sun-sun, sun-sol, sol-sol)
all return this error:

rlogin: kcmd to host hismen failed - ASN.1 identifier doesn't match expected value

Klogind logs "Authentication failed from xxx" 
             "Kerberos authentication failed" messages
on the receiving (host 3) machine.

I think I'm using the rite local ticket cache on host2.
Any comments/advice/info?

home help back first fref pref prev next nref lref last post