[2130] in Kerberos-V5-bugs
Re: Kerberos 4 support in krb5kdc
daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Wed Aug 7 22:46:05 1996
Date: Wed, 7 Aug 1996 22:44:12 -0400
From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
To: David Slack <slack@elendil.cc.utah.edu>
Cc: krb5-bugs@MIT.EDU
In-Reply-To: "[2121] in Kerberos-V5-bugs"
Hi there,
My apologies for not getting back to you sooner; I've been on
vacation for the past week, and am only now starting to crawl out from
under the mountain of email that built up while I was gone....
We have Kerberos 5 beta 6 running quite well on a mix of
Solaris and Linux boxes. Our problem is getting the krb5kdc to answer
Kerberos 4 ticket requests. We have the kdc running on a Sun (Solaris
2.4). When we ask for a ticket with a Kerberos 4 kinit (on a Sun, a
PC, or a Mac), it always says incorrect password.
The problem is that you need enter the password using the V4-compatible
salt. (This can be done using the kdb5_edit command "av4k", for
example). Make sure the your kdc.conf file has a supported_enctypes
line so that password changes will include the V4 salt. (see
src/config-files/kdc.conf for a example kdc.conf).
Good luck! I hope this helps!!
- Ted
