[2588] in Kerberos_V5_Development
Re: Windows NT Application Talking to V4 Kerberized Server
daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Mon Oct 20 14:55:29 1997
Date: Mon, 20 Oct 1997 14:53:05 -0400
From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
To: "Jeffery D. Jacobson" <jdj@busstop.jpl.nasa.gov>
Cc: krbdev@MIT.EDU, jdj@busstop.jpl.nasa.gov
In-Reply-To: Jeffery D. Jacobson's message of Thu, 9 Oct 1997 10:52:13 -0700
(PDT), <199710091752.KAA02656@busstop.Jpl.Nasa.Gov>
Date: Thu, 9 Oct 1997 10:52:13 -0700 (PDT)
From: "Jeffery D. Jacobson" <jdj@busstop.jpl.nasa.gov>
I'm porting a V4 Kerberized Client that that uses Kerberos to
authenticate at connection time. I've installed the NT Alpha2
snapshot, and have linked my client into the lib\krb4. My
application cannot find my credentials. Looking at the code, I see
that the version for krb_mk_request looks in \kerberos\ticket.ses,
and the kinit (V5) puts tickets in c:\WINNT\krb5cc.
Is it feasible to use the NT snapshot to talk to a Version 4
Kerberised server? Can the V4 krb_mk_request obtain credentials from
a V5 file cache?
No, the compatibility in the Kerberos distribution goes the other way;
The KDC will support Kerberos V4 and V5 requests, but a V4
krb_mk_request won't be able to get requests from a V5 ticket cache.
- Ted
