[7426] in Kerberos

home help back first fref pref prev next nref lref last post

gssftp problem in 5 Beta6 distribution

daemon@ATHENA.MIT.EDU (Brian Perkins)
Sun Jun 9 17:17:28 1996

To: kerberos@MIT.EDU
Date: 9 Jun 1996 20:24:07 GMT
From: bperkins@netspace.org (Brian Perkins)

Gssftp seems to have a strange bug.  The client tries to get credentials
for ftp/<hostname> while the server wants ftpd/<hostname>.  The result is
this:

 4:13pm throb[3] /usr/local/bin/ftp throb                                   ~
Connected to throb.netspace.org.
220 throb FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: Wrong principal in request
GSSAPI error: accepting context
GSSAPI ADAT failed
GSSAPI authentication failed
Name (throb:bperk):

and syslog  for the kdc server shows:

Jun  9 16:13:35 throb syslog: TGS_REQ 128.148.55.229(88): ISSUE: authtime 834351
105, bperk@NETSPACE.ORG for ftp/throb.netspace.org@NETSPACE.ORG

 Which should not be, at least according to the install doc.

Changing the following line:
char* gss_services[] = { "ftp", "host" }; 
to
char* gss_services[] = { "host", "host" };

eliminates the problem, but this doesn't seem to be what was intended.

The platform is a Linux-ELF machine.  

Brian Perkins




home help back first fref pref prev next nref lref last post