[8068] in Kerberos
Re: 0 seconds initialization (round 2)
daemon@ATHENA.MIT.EDU (Soonam Kahng)
Fri Sep 20 06:05:57 1996
To: kerberos@MIT.EDU
Date: 20 Sep 1996 09:32:41 GMT
From: soonam@list.gmu.edu (Soonam Kahng)
Soonam Kahng (soonam@list.gmu.edu) wrote:
: I am now installing B7 on Solaris2.5 with Sparc5.
: Because this is experimental task, I just install everything on same machine.
: (KDC=SERVER=ADMIN=CLIENT)
: In my case, still the MAX life of "krbtgt" is "0" even though I modified
: MAXLIFE of "krbtgt" with "modprinc" command at "kadmin.local" prompt.
I found that all principals MAX_Life is set as "0". After I modified
principals' life times (include host/list.gmu.edu). It works. I could
"telnet -a" without re-entering passwd.
However, I need to play with this more...not tonight :)
ps. from the test of FTP, I got following error
why does it try to authenticate "ftp@list.gmu.edu" instead of
"soonam" (myself) ?
60list% ftp -d list
Connected to list.gmu.edu.
220 list FTP server (Version 5.60) ready.
---> AUTH GSSAPI
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
Trying to authenticate to <ftp@list.gmu.edu> <--------------!!!!!!
calling gss_init_sec_context
---> ADAT
<long key value is deleted>
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: Wrong principal in request
GSSAPI error: accepting context
GSSAPI ADAT failed
GSSAPI authentication failed
Name (list:soonam):
regards,
<Soonam>
soonam@isse.gmu.edu
