[2623] in Kerberos-V5-bugs
pending/334: K5 problems
daemon@ATHENA.MIT.EDU (jar@ornl.gov)
Mon Jan 6 14:55:16 1997
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: gnats-admin@rt-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, jar@ornl.gov
Date: Mon, 06 Jan 1997 14:54:20 -0500 (EST)
From: jar@ornl.gov
To: krb5-bugs@MIT.EDU
>Number: 334
>Category: pending
>Synopsis: K5 problems
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: gnats-admin
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Mon Jan 06 14:55:01 EST 1997
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
1) krb5-send-pr requires emacs which we don't like and don't have.
2) I was unsuccessful in getting k5 to make on AIX 4.1.x. I got
/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: undefined reference to `odm_free_list'
/lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: undefined reference to `getattr'
/lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: relocation truncated to fit: 0x1a getattr
/lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: undefined reference to `odm_free_list'
/lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: undefined reference to `odm_terminate'
/lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: relocation truncated to fit: 0x1a odm_terminate
/usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: getttyent.o: loader reloc in read-only
section .text
/usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: final link failed: Invalid operation
make: 1254-004 The error code from the last command is 1.
3) The new version seems to require that kdc.conf be in xx/var/krb5kdc, where xx
is the default location. This is undocumented, and differs from beta7.
4) I have made and installed K5 on several HPs. A 10.10 maching and a CMW
(10.09) secure operating system. The server is on the CMW machine. On the
non-cmw machine, I get a ticket for myself and then telnet to the non-cmw
machine from itself. I get the following:
dsrocf:/krb5:374: bin/kinit jar
Password for jar@dsdoe.ornl.gov:
dsrocf:/krb5:375: klist
Ticket cache: /tmp/krb5cc_0
Default principal: jar@dsdoe.ornl.gov
Valid starting Expires Service principal
06 Jan 97 14:52:27 07 Jan 97 00:51:23 krbtgt/dsdoe.ornl.gov@dsdoe.ornl.gov
dsrocf:/krb5:376: bin/telnet -l jar dsrocf 545
Trying 134.167.135.15...
Connected to dsrocf.dsdoe.ornl.gov (134.167.135.15).
Escape character is '^]'.
[ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed:
Decrypt integrity check failed ]
[ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed:
Decrypt integrity check failed ]
telnetd: Authorization failed.
Connection closed by foreign host.
What's the problem??
Jim Rome
