[33492] in Kerberos
Re: Kadmin compatibility
daemon@ATHENA.MIT.EDU (Derek Yarnell)
Fri Jun 17 17:41:17 2011
Message-ID: <4DFBC951.2030302@umiacs.umd.edu>
Date: Fri, 17 Jun 2011 17:38:25 -0400
From: Derek Yarnell <derek@umiacs.umd.edu>
MIME-Version: 1.0
To: Tom Yu <tlyu@mit.edu>
In-Reply-To: <ldvips487oe.fsf@cathode-dark-space.mit.edu>
Cc: kerberos@mit.edu
Reply-To: derek@umiacs.umd.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 6/17/11 5:33 PM, Tom Yu wrote:
> Derek Yarnell <derek@umiacs.umd.edu> writes:
>
>> So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
>> running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
>> connect to the kadmind server,
>
>> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
>> error strings are:
>> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
>> error strings are:
>> kadmind[5009](Notice): Incorrect channel bindings were supplied
>> kadmind[5009](Notice): Incorrect channel bindings were supplied
>> kadmind[5009](Notice): No error
>> kadmind[5009](Notice): No error
>> kadmind[5009](Notice): GSS-API error strings complete.
>> kadmind[5009](Notice): GSS-API error strings complete.
>
> This is probably a known bug that is a side effect of some IPv6
> changes to the RPC library in the krb5-1.9 release. It should be
> fixed in the upcoming krb5-1.9.2 release.
>
> http://krbdev.mit.edu/rt/Ticket/Display.html?id=6920
>
Thanks Tim for the idea, though it work.
Thanks Tom for the note, now to hopefully get Red Hat to patch this in a
timely manor.
--
---
Derek T. Yarnell
University of Maryland
Institute for Advanced Computer Studies
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
