[7426] in Kerberos
gssftp problem in 5 Beta6 distribution
daemon@ATHENA.MIT.EDU (Brian Perkins)
Sun Jun 9 17:17:28 1996
To: kerberos@MIT.EDU
Date: 9 Jun 1996 20:24:07 GMT
From: bperkins@netspace.org (Brian Perkins)
Gssftp seems to have a strange bug. The client tries to get credentials
for ftp/<hostname> while the server wants ftpd/<hostname>. The result is
this:
4:13pm throb[3] /usr/local/bin/ftp throb ~
Connected to throb.netspace.org.
220 throb FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: Wrong principal in request
GSSAPI error: accepting context
GSSAPI ADAT failed
GSSAPI authentication failed
Name (throb:bperk):
and syslog for the kdc server shows:
Jun 9 16:13:35 throb syslog: TGS_REQ 128.148.55.229(88): ISSUE: authtime 834351
105, bperk@NETSPACE.ORG for ftp/throb.netspace.org@NETSPACE.ORG
Which should not be, at least according to the install doc.
Changing the following line:
char* gss_services[] = { "ftp", "host" };
to
char* gss_services[] = { "host", "host" };
eliminates the problem, but this doesn't seem to be what was intended.
The platform is a Linux-ELF machine.
Brian Perkins