[5859] in Kerberos
V4 telnet to V5 (Beta 5) telnetd (NCSA Telnet)???
daemon@ATHENA.MIT.EDU (John Bien)
Thu Sep 14 02:28:29 1995
To: kerberos@MIT.EDU
Date: 14 Sep 1995 04:29:02 GMT
From: jsb@gumby.dsd.TRW.COM (John Bien)
Well, it looks like I'm really close (but not quite there).
I've installed krb5-beta5 with Version 4 support.
I can run the supplied telnet, and rlogin with no problems.
Now I'm trying to get NCSA telnet (on my Mac) to work.
When I run try to connect (to a host called "pokey"), the window
pops up to ask for my password, but I don't get authenticated. When
I run the telnet server in debug mode, I see the following
messages:
>>>TELNETD: I support auth type 2 2
>>>TELNETD: I support auth type 2 0
>>>TELNETD: I support auth type 1 0
>>>TELNETD: Sending type 2 2
>>>TELNETD: Sending type 2 0
>>>TELNETD: Sending type 1 0
>>>TELNETD: in auth_wait.
>>>TELNETD: Got NAME [jbien]
Got 96 bytes of authentication data
CK: 775228458: 04 06 01 53 50 2e 54 52 57 2e 43 4f 4d 00 30 20
Kerberos failed him as
>>>REPLY:2: [1] (39) 43 61 6e 27 74 20 64 65 63 6f 64 65 20 61 75 74
When I go into KConfig (on the Mac), I see I now have
the following tickets:
jbien@SP.TRW.COM krbtgt.SP.TRW.COM@SP.TRW.COM
jbien@SP.TRW.COM rcmd.pokey@SP.TRW.COM
Since this is a V4 application, I have (on the server) an /etc/srvtab
file with the singe entry for "rcmd/pokey.sp.trw.com".
From what I can tell, my Mac successfully gets a ticket
from the server for the "rcmd" principle on pokey, but pokey
cannot read it. Do I have the right tickets here?
Are people using the NCSA telnet with krb5-beta5?
In krb5_edit, why is there an "add_v4_key"? I made my user
ticket with this option (jbien). I can "kinit" from both
Version 4 and Version 5 clients (if I used add_new_key, Version 4
clients couldn't log in).
I also tried adding my server with this option.
So I've tried the following entries in my database (and
extracted with extract_v4_srvtab into /etc/srvtab).
1. add_rnd_key rcmd/pokey.sp.trw.com ** FAIL **
2. add_v4_key rcmd/pokey.sp.trw.com ** FAIL **
3. add_v4_key rcmd/pokey ** FAIL **
Any ideas?
Thanks,
-John
--
John Bien (310) 814-8546
TRW Space and Electronics Group, Network Services
j.bien@gumby.sp.TRW.COM (Internet)