[6550] in Kerberos
Re: Administration server
daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Jan 30 12:02:52 1996
To: e17540@ltec.net (Mike Sanders)
Cc: kerberos@MIT.EDU
From: hartmans@MIT.EDU (Sam Hartman)
Date: 30 Jan 1996 11:47:20 -0500
In-Reply-To: e17540@ltec.net's message of 29 Jan 1996 22:19:51 GMT
>>>>> "Mike" == Mike Sanders <e17540@ltec.net> writes:
Mike> If anyone has had success in implementing the Kerberos
Mike> administration server, I'd like to know how. My 'kadmind5'
Mike> process core dumps on startup, complaining that the format
Mike> of the krb5_adm.acl file is incorrect, even though the only
Mike> entry in it is "* o".
Last summer, I worked on getting kadmind5 to work under AIX.
The main problem, especially in the ACL handling code was an
assumption that char is signed--something that is not true by default
under AIX. In particular, the code that checks for EOF was broken and
would fail if chars were unsigned. (In general, you want to put the
output of getc() into an int, not a char). This exposes another bug,
where the kadmind dumps core if it doesn't parse the ACL file
correctly.
Mike> Any suggestions for an AIX implementation would be
Mike> apprieciated.
Mike> Thanks in advance,
Mike> Mike Sanders Lincoln Telephone - Data Communications
Mike> mikesanders@ltec.com
