[7996] in Kerberos
krb5b7 under linux-2.0.10
daemon@ATHENA.MIT.EDU (Christopher Seawood)
Tue Sep 17 14:17:21 1996
Date: Tue, 17 Sep 1996 10:45:59 -0700 (PDT)
From: Christopher Seawood <cseawood@qualcomm.com>
To: kerberos@MIT.EDU
I've been having several problems trying to get beta 7 setup on my linux
boxes. I have a beta5 installation going with hardly any problems.
Problems/queries:
1) Is there a place besides athena-dist.mit.edu to get patches that are
submitted to this list?
2) I cannot seem to get my tickets to be initialized for any longer than
the instant that I ran kinit.
After a weekend of debugging, I determined that kinit is getting the
correct time, but somewhere in the krb5_get_in_tkt_with_password()
function, the server is returning a time that sets the authtime,
starttime, and endtime of the ticket's krb5_creds.time struct to the knit
time and setting krb5_creds.time.renew to 0. (This trace eventually landed
me in lib/krb5/asn.1/asn1_k_decode.c (asn1_decode_krb_cred_info()) and at
that point I reasoned that any mods I made would affect a lot more than I
originally intended.)
3) modprinc doesn't like the -maxrenewlife flag. I tracked this
one down to be an oversight in lib/kadm5/server_internal..h. You'll need to
add KADM5_MAX_RLIFE to the #define list of ALL_PRINC_MASK on line 78.
-----
Chris Seawood <cseawood@qualcomm.com> - Software Engineer / Unix Sysadmin
http://www.qualcomm.com/~cseawood/ - Prince Fanatic / Linux Advocate
Opinions stated are NOT an (un)official representation of QUALCOMM Incorporated
