[979] in Kerberos-V5-bugs
Inconsistent behavior?
daemon@ATHENA.MIT.EDU (georges rahbani)
Tue Dec 6 14:28:47 1994
Date: Tue, 06 Dec 1994 11:28:00 -0800
To: krb5-bugs@MIT.EDU
From: georgesr@wrq.com (georges rahbani)
Cc: georgesr@elmer.wrq.com
Hi Ted,
I have been running Kerberos 5 server here on sunos 4.1.x for a week now. I
started this venture to figure out why kinit with KRB5_PADATA_ENC_UNIX_TIME
fails on the account you gave me at ATHENA.MIT.EDU. Here is what I found:
PS. The sun code has had no modifications from the MIT downloaded code.
Exception is I added two includes to get it to compile (I sent you a message
about that).
kinit with no pre-authentication works fine for my realm CHESTER.GAR as well
as for ATHENA.MIT.EDU. This also works when I run kinit from the sun machine.
This is defined in the array preauth_search_list in the file kinit.c
* kinit with KRB5_PADATA_ENC_UNIX_TIME fails from both the pc as well as
when I try it from the compiled code on the sun. On the PC I get in etext
"Integrity check failed" and on the sun kinit prints out "incorrect password"
sclient works fine from the pc using the sserver on the sun "CHESTER.GAR".
But it fails on ATHENA.MIT.EDU with an error message 31 and etext =
"Integrity check failed". I am still unable to run sclient from the sun. I
think an entry is still missing in one of the kerberos database files.
My question is that, is this normal behavior? Or has anybody reported
something like this before. Could the domain have something to do with this
"wrq.com" vs "mit.edu"? or could the time difference be a factor?
Any help or input is much appreciated.
Kerberzed telnet is next on my schedule.
Regards.
Georges Rahbani
Walker, Richer & Quinn, Inc.
georgesr@wrq.com
