[16969] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: [External] : [krbdev.mit.edu #9136] AutoReply: S4U2Proxy API error

daemon@ATHENA.MIT.EDU (Rajbir Chahal via RT)
Wed Aug 28 09:38:31 2024

From: "Rajbir Chahal via RT" <rt@kerborg-prod-app-1.mit.edu>
In-Reply-To: <SJ0PR10MB574473AB6BC1F4E22C02632382952@SJ0PR10MB5744.namprd10.prod.outlook.com>
Message-ID: <rt-4.4.3-2-849015-1724852302-1618.9136-5-0@kerborg-prod-app-1.mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9136":;
Date: Wed, 28 Aug 2024 09:38:22 -0400
MIME-Version: 1.0
Reply-To: rt@kerborg-prod-app-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


<URL: http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9136 >


Hello,

Were you able to look into this? When can I expect a response?

thanks,
Rajbir
________________________________
From: Kerberos Version 5 Issues via RT <rt@kerborg-prod-app-1.mit.edu>
Sent: Thursday, August 22, 2024 3:15 PM
To: Rajbir Chahal <rajbir.chahal@oracle.com>
Subject: [External] : [krbdev.mit.edu #9136] AutoReply: S4U2Proxy API error


Greetings,

This message has been automatically generated in response to the
creation of a trouble ticket regarding:
        "S4U2Proxy API error",
a summary of which appears below.

There is no need to reply to this message right now.  Your ticket has been
assigned an ID of [krbdev.mit.edu #9136].

Please include the string:

         [krbdev.mit.edu #9136]

in the subject line of all future correspondence about this issue. To do so,
you may reply to this message.

                        Thank you,


-------------------------------------------------------------------------

Hello,

I am testing Kerberos S4U2Proxy API (krb5_get_credentials_for_proxy()).
Client is MIT Kerberos (version 5-1.21.2) test program, krb5-1.21.2/src/tests/s4u2proxy.c. Kerberos KDC is Active Directory (on Windows Server 2016).

On making this API call, the client receives error "-1765328371, KDC can't fulfill requested option".

Has this functionality been tested with Active Directory? Has it been tested with any other KDCs?

Please share guidance about resolving this issue.

I have reviewed the krb5-bugs archive and did not find a previous bug related to this issue.

thanks,
Rajbir


_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post