[7128] in Kerberos
Re: kpasswd problem
daemon@ATHENA.MIT.EDU (Dennis Putnam)
Fri Apr 19 08:35:18 1996
Date: Fri, 19 Apr 1996 08:07:13 -0400 (EDT)
From: Dennis Putnam <putnamd@atlodbs1.hayes.com>
Reply-To: putnamd@MIT.EDU.hayes.com
To: kerberos@MIT.EDU
In-Reply-To: <9604190433.AA02317@atlodbs1.hayes.com.hayes.com>
>
>
> In the previous versions of Kerberos, the administration tools were
> developed by SNL (SANDIA NATIONAL LABORATORIES). With B5, MIT decided
> to start their own Administration tools. This include the change
> password protocol. However the first release of the software
> (kadmind5 and kpasswd) is not very good and will be modified in
> future releases.
>
> My advise to you is to use the old SANDIA stuff which are under
> kadmind.old directory from MIT Kerberos V5 B5. The admin daemon is
> kadmind and the change password program is kpasswd. This works fine.
>
>
Thanks for the response but you were not even close. It turned out there is
an undocumented principle needed to make kpasswd work. I did the following:
ark admin/hayes.com
Viola! It now works. I sure hope the folks at MIT spend a little time doing
documentation. So far every problem I have encountered has been because of
missing or incorrect documentation. Actually some of the principles that need
to be in the database are so basic I am suprised the krb5_create does not
put them there automatically.
My last remaining problem is with slave servers. But I think I have traced that
to a DNS problem. My 'gethostbyname' is not returning a fully qualified host
name so the slave host sees the principle 'host/galen@HAYES.COM' instead of
'host/galen.hayes.com@HAYES.COM'. The kprop code builds the principle using
'gethostbyname' so that is why it is wrong.
---
Dennis Putnam, Manager
Technical Planning and Services
Hayes Microcomputer Products, Inc.
Opinions expressed are mine and should not be viewed as an official positon of
Hayes or its management.
"Our Founding Fathers did not create our civil liberties ... They safegarded
them." Tanya Mataksa, NRA-ILA Executive Director.
