[5321] in Kerberos
Problems with forwarding of credentials, K 5 Beta 5
daemon@ATHENA.MIT.EDU (Doug Engert)
Sun Jun 4 13:17:08 1995
Date: Sun, 04 Jun 95 11:38:56 CDT
From: "Doug Engert" <DEEngert@anl.gov>
To: <kerberos@MIT.EDU>
Cc: <authtf@es.net>
wolfgang@wsrcc.com (Wolfgang Rupprecht), Danny Braniss
<danny@cam.ov.com>, mike@ux5.lbl.gov (Mike Helm) and myself are
all trying to use forwardable credentials with Kerberos 5 beta 5
and are running into strange situations and are using different
configurations.
I have built K5 beta 5 for Solaris 2.3, AIX 3.2.5, SunOS 4.1.3_u1
and Linux 1.2.0 kernel using gcc 2.6.3 for each. I have installed
the mk_faddr.c raddr->length patch, and a fix to cleanup.h (see
attached message, MIT responded that the individual modules
should be changed instead.)
I am using a DCE 1.0.3a Security server on Solaris 2.3 with the
Transarc code, and a fix by Transarc for a "flags" problem.
I am able to forward credentials from every system to every other
system, but they only appear to be usable from the SunOS 4.1.3
system, i.e. when the SunOS is the receiving system. I am using
rlogin for the tests.
I also see some other strange situations, such as connection
timed out or a hang like Mike has seen. But the trying again it
works!
Wolfgang, you report that you have it working. If you could
explain your configurations and systems that might help the rest
of us.
Since it works on some systems, it sounds like a memory overlay,
or uninitiated variable.
I did find that appl/bsd/forward.c needs krb5_address **addrs =
0; to avoid a problem on Solaris 2.3 with gethostbyname not
returning a fully qualified name.
Douglas E. Engert
Systems Programming
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(708) 252-5444
Internet: DEEngert@anl.gov
