[8046] in Kerberos
Can't forward credentials with beta7
daemon@ATHENA.MIT.EDU (Malcolm Beattie)
Thu Sep 19 12:03:27 1996
To: kerberos@MIT.EDU
Date: 19 Sep 1996 15:11:14 GMT
From: mbeattie@sable.ox.ac.uk (Malcolm Beattie)
I've installed beta7 (Linux, RedHat 3.0.3 with kernel upgraded to
2.0.18) and neither rlogin nor telnet will forward credentials.
I have klogind and telnetd correctly configured in /etc/inetd.conf,
/etc/services correct, the keytab contains the required host/...
principal and rlogin and telnet -a both work fine without "-f"
(and the "-x" option works fine too).
However, using "rlogin -f" from the host to itself logs me in with
environment variables
KRB5CCNAME=FILE:/tmp/krb5cc_p18746
KRBTKFILE=/tmp/tkt_ttyp3
but there's no /tmp/krb5cc_p18746 file (PID 18746 is the klogind
process, as I would have expected). Similarly, using "telnet -a -f"
(or -F) produces
% telnet -a -f boris
Trying a.b.c.d...
Connected to a.b.c.d.
Escape character is '^]'.
[ Kerberos V5 accepts you as ``mbeattie@OX.AC.UK'' ]
[ Kerberos V5 accepted forwarded credentials ]
%
but klist can't find the credential cache that's supposed to have
been forwarded (again, KRB5CCNAME=FILE:/tmp/krb5cc_p18757 and
PID 18757 is the telnetd process).
I have a feeling that I tried this with beta6 and it worked OK.
Any ideas?
--Malcolm
--
Malcolm Beattie <mbeattie@sable.ox.ac.uk>
Oxford University Computing Services
"Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee
