[6348] in Kerberos
v4 tickets with v5 server
daemon@ATHENA.MIT.EDU (Art Houle)
Mon Dec 11 14:43:33 1995
Date: Mon, 11 Dec 1995 14:27:29 -0500 (EST)
From: Art Houle <houle@acns.fsu.edu>
To: kerberos@MIT.EDU
Cc: efleming@ltnpo1.xyplex.com
Hello,
I have been trying to get a xyplex 1620 terminal server to work with
kerberos V5, while using V4 tickets. This note is for thoes who may be
trying to do the same and to check my sanity with those who may know better.
My findings through trial and error are:
1. Xyplex V5 ticket requests will work on the V5beta5 server if the
user-name/password entries were added with 'kdb5_edit ank'.
2. Xyplex V4 ticket requests will NOT work on the V5beta5 server if the
user-name/password entries are added with kdb5_edit ank.
3. Xyplex V4 ticket requests will work on the V5beta5 server if the
user-name/password entries are added with kdb5_edit av4k or if they are
added using the kdb5_convert utility to convert V4 database to V5 server.
4. Xyplex V5 ticket requests will NOT work on the V5beta5 server if the
user-name/password entries are added with the kdb5_edit av4k or if they
are added using the kdb5_convert utility to convert V4 database to V5 server.
It seems that kerberos V5 beta 5 can service either V4 or V5 requests but
the database stores V4 and V5 user-name/passwords differently, and that
each entry is either a V4 or a V5 entry but they can NOT be interchanged.
Art Houle e-mail: houle@acns.fsu.edu
Academic Computing & Network Services Voice: 644-2591
Florida State University FAX: 644-8722