[3038] in Kerberos

home help back first fref pref prev next nref lref last post

Forwardable TGTs in v5 beta 3

daemon@ATHENA.MIT.EDU (Derrick J Brashear)
Wed Mar 16 19:18:13 1994

Date: Wed, 16 Mar 94 18:04:30 EST
From: shadow@alycia.andrew.cmu.edu (Derrick J Brashear)
To: kerberos@MIT.EDU

Has anyone had success getting forwardable TGT's to work with the 
Kerberos 5 beta 3 r-commands? I've compiled it with both ISODE
6.8 and ISODE 7.0, with no luck (also tried Sandia's Kerberos 5
beta 2 with ISODE 6.8 and didn't get the r-commands to work!)

By modifying krlogind.c slightly as below, I find that the problem
is an ISODE one:
diff krlogind.c krlogind.c.orig
160d159
< #include <com_err.h>
1518,1519c1517
<           com_err("rlogind", status, "while getting forwarded creds.");
<           /*fatal(netf, "Can't get forwarded credentials");*/
---
>           fatal(netf, "Can't get forwarded credentials");
The error this returns is:
rlogind: isode: unacceptable combination of options while getting forwarded
creds

The .k5login file is correct, and I'm using the -f option to kinit. klist -f
shows that my tickets have a "forwardable" flag.

Has anyone had similar experiences? Does anyone have forwardable TGT's
working? Should I try ISODE 8? 

Any suggestions appreciated....

-D

home help back first fref pref prev next nref lref last post