[33294] in Kerberos
Re: Help using PKINIT (MIT)
daemon@ATHENA.MIT.EDU (JAKOBI Pascal)
Thu Mar 31 13:20:26 2011
From: JAKOBI Pascal <pascal.jakobi@thalesgroup.com>
To: Kevin Coffman <kwc@umich.edu>
Date: Thu, 31 Mar 2011 17:36:09 +0200
Message-ID: <14570_1301585792_4D949F80_14570_12823_1_4D949F69.1000100@thalesgroup.com>
In-Reply-To: <AANLkTi=ZnLesj1Q6AOnLSnNdsnyq7FV5zKz2H-0+rafs@mail.gmail.com>
Content-Type: multipart/mixed; boundary="_006_4D949F691000100thalesgroupcom_"
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
--_006_4D949F691000100thalesgroupcom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I will rerun the texts right now.
Many thanks for the clarification.
In the meantime, pls find attached the certificates listing for the CA, the=
KDC, and the end user.
P
On 31/03/2011 16:44, Kevin Coffman wrote:
On Thu, Mar 31, 2011 at 7:28 AM, JAKOBI Pascal
<pascal.jakobi@thalesgroup.com><mailto:pascal.jakobi@thalesgroup.com> wrote=
:
> Hi there
>
> I need help in order to get PKINIT working on Fedora 14.
> I have a running kerberos server with krb-server, krb-server-ldap and so
> on (1.8.2).
> I also have installed krb5-pkinit-openssl.
>
> The stuff works like a charm when running in "standard" kerberos, i.e.
> w/o pkinit.
>
> Then we tried to set up pkinit according to the instructions found at
> http://k5wiki.kerberos.org. In particular, we checked carefully, our cert=
s.
Perhaps you could list your certificate information here for both the
user and KDC certificates (the output of "openssl x509 -noout -text
-in YOUR.CRT").
> However, the behaviour does not seem correct.
>
> We issue a kinit -X x509_user_identity=3D<DN found in the client cert>
> <principal> on the client side (another Fedora instance with software
> certs).
> With Wireshark, we see that an AS-REQ is sent to the server. However, it
> does not seem to convey any certificate (pa-data type =3D 149).
>
> Then the server replies with ERR_PREAUTH_REQUIRED (the principal that is
> used has its preauth option set). Is this normal ?
This is normal. If the KDC's pkinit preauth plugin is properly
configured (valid certificate and kdc.conf configuration options), one
of the preauth options it should return is PKINIT. (14,15,16, or 17)
The client should then send the PKINIT preauth information in its
subsequent request. If it is accepted by the KDC, there shouldn't be
a pasword prompt.
> As a result of this, the standard AS_REQ/REP procedure seems to be
> played (as a password is requested on the client side).
>
> The problem is that even when recompiling pkinit with DEBUG set, we
> cannot see anything....
Are you running your KDC in the foreground? Debug output will go to
stderr or stdout. Verify that the PKINIT preauth plugin is
successfully loaded and properly initialized.
> Any help (very) greatly appreciated.
>
> Thanks
> Pascal
>
> --
> Pascal Jakobi
> Sr. Architect, Thales
> 1 av. A. Fresnel
> 91767 Palaiseau, France
> Tel. : +33 1 69 41 60 51
> Mob.: + 33 6 87 47 58 19
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu<mailto:Kerberos@mit.edu>
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
.
--
Pascal Jakobi
Sr. Architect, Thales
1 av. A. Fresnel
91767 Palaiseau, France
Tel. : +33 1 69 41 60 51
Mob.: + 33 6 87 47 58 19
--_006_4D949F691000100thalesgroupcom_
Content-Type: text/plain; name="pascal.crt.lst"
Content-Description: pascal.crt.lst
Content-Disposition: attachment; filename="pascal.crt.lst"; size=3463;
creation-date="Thu, 31 Mar 2011 17:36:31 GMT";
modification-date="Thu, 31 Mar 2011 17:36:31 GMT"
Content-Transfer-Encoding: base64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--_006_4D949F691000100thalesgroupcom_
Content-Type: text/plain; name="ca.crt.lst"
Content-Description: ca.crt.lst
Content-Disposition: attachment; filename="ca.crt.lst"; size=3137;
creation-date="Thu, 31 Mar 2011 17:36:31 GMT";
modification-date="Thu, 31 Mar 2011 17:36:31 GMT"
Content-Transfer-Encoding: base64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--_006_4D949F691000100thalesgroupcom_
Content-Type: text/plain; name="kdc.crt.lst"
Content-Description: kdc.crt.lst
Content-Disposition: attachment; filename="kdc.crt.lst"; size=3486;
creation-date="Thu, 31 Mar 2011 17:36:31 GMT";
modification-date="Thu, 31 Mar 2011 17:36:31 GMT"
Content-Transfer-Encoding: base64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--_006_4D949F691000100thalesgroupcom_
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--_006_4D949F691000100thalesgroupcom_--
