[6043] in Kerberos
mysterious network address!
daemon@ATHENA.MIT.EDU (Laureandi gruppo reti)
Tue Oct 24 14:54:39 1995
Date: Tue, 24 Oct 95 18:33:17 +0100
From: laurea@deis93.cineca.it (Laureandi gruppo reti)
To: kerberos@MIT.EDU
Hello,
I am working with eBones which I have installed under SunOS 4.1.2. I have a
mysterious problem with network address. My kdc and admin server is
deis90.cineca.it (137.204.57.90). When I use rlogin (or rsh) it fails:
deis90#rlogin deis90
Realm: cineca.it
krbtgt cineca.it cineca.it laurea
Ticket->length = 56
Issue date: 814548086
Authent->length = 103
idl = 32, tl = 56
lrealm is cineca.it
krb_udp_port is 750
Getting host entry for deis90...Got it.
Sending message to 137.204.57.90...Sent
Waiting for reply...received packet from 137.204.57.90
Received it
Clen is 88
rcmd deis90 cineca.it laurea
Ticket->length = 48
Issue date: 814548116
Authent->length = 95
idl = 32, tl = 48
Kerberos rlogin failed: Incorrect network address (krb_rd_req)
Password:
It is curious look at kerberos.log file:
24-Oct-95 16:21:55 APPL Request laurea.@cineca.it on 137.204.57.90 for rcmd.deis90
24-Oct-95 16:21:56 ticket->length: 48
24-Oct-95 16:21:56 authent->length: 95
24-Oct-95 16:21:56 Ticket Contents.
24-Oct-95 16:21:56 Aname: laurea@cineca.it
24-Oct-95 16:21:56 Service: rcmd.deis90
24-Oct-95 16:21:56 sname=rcmd, sinst=deis90
24-Oct-95 16:21:56 About to decrypt authenticator
24-Oct-95 16:21:56 Done.
24-Oct-95 16:21:56 Pname: laurea laurea
24-Oct-95 16:21:56 Realm: cineca.it cineca.it
24-Oct-95 16:21:56 Address: -134220512 -1983104678 <---!!!!!!1
The address in the ticket is: 247.255.245.144 (-134220400)
The address of the client is: 137.204.57.90 (-1983104678)
So the problem seems to be that the address included in the ticket when generated
by the
TGS is different from the source address in the packet received by the rlogin server.
On the top of that, 247.255.245.144 is not as far as I can tell, a legal address.
Note that the sample application is oK.
deis90#simple_server
socket has port # 5600
Received 103 bytes
krb_rd_req returned 0: OK
Got authentication info from laurea@cineca.it
&c_sock.sin_addr is 137.204.57.90
Received 45 bytes
calc_cksum = 60216, received cksum = 60200krb_rd_safe returned 0: OK
Safe message is: hi, Jennifer!
Received 38 bytes
delta_t = 0krb_rd_priv returned 0: OK
Decrypted message is: hi, Jennifer!
deis90#simple_client
s_sock.sin_addr is 137.204.57.90
Local Kerberos realm is cineca.it
Kerberos realm of kerberos is cineca.it
Realm: cineca.it
Realm: cineca.it
krbtgt cineca.it cineca.it laurea
Ticket->length = 56
Issue date: 814548086
Authent->length = 103
idl = 32, tl = 56
lrealm is cineca.it
krb_udp_port is 750
Getting host entry for deis90...Got it.
Sending message to 137.204.57.90...Sent
Waiting for reply...received packet from 137.204.57.90
Received it
Clen is 104
sample kerberos cineca.it laurea
Ticket->length = 56
Issue date: 814548692
Authent->length = 103
idl = 32, tl = 56
Got credentials for sample.
Sent authentication data: 103 bytes
krb_get_cred returned 0: OK
cksum = 1477748981krb_mk_safe returned 45
Sent checksummed message: 45 bytes
krb_mk_priv returned 38
Sent encrypted message: 38 bytes
Could you help me? Any idea? Thanks in advance.
Stefano Franchini
DEIS University of Bologna
