[2732] in testers

home help back first fref pref prev next nref lref last post

kinit is confused

daemon@ATHENA.MIT.EDU (Marc Horowitz)
Thu Dec 29 18:46:27 1994

To: testers@MIT.EDU
Cc: tytso@MIT.EDU
Date: Thu, 29 Dec 1994 18:46:04 EST
From: Marc Horowitz <marc@MIT.EDU>

<2> pickled-herring:~> tail -1 /etc/athena/version
Athena Server (RSAIX) Version 7.7F Thu Aug 25 15:49:30 1994
<3> pickled-herring:~> hesinfo `hostname` cluster
lpr meadow
syslib beta-rssys

Now, the problem:

<15> pickled-herring:~> kinit marc@GZA.COM
MIT Athena (pickled-herring)
Kerberos Initialization for "marc@GZA.COM"
Password: 
marc@GZA.COM: Can't open/find configuration file while calling krb5_get_in_tkt_with_password
Exit 1

<20> pickled-herring:~> strings - `where kinit` | grep krb.conf
/etc/athena/krb.conf.v5
/etc/athena/krb.conf
/etc/krb.conf
/etc/athena/krb.conf
/etc/krb.conf

/etc/athena/krb.conf.v5 doesn't exist.  Once I create it, kinit works
fine, and I even have a set of krb5 tickets in /tmp/krb5cc_8888.

However, athena kinit breaks (auth is like renew):

<34> pickled-herring:~> auth
MIT Athena (pickled-herring)
Kerberos Initialization for "marc"
Password: 
marc: Invalid message type while calling krb5_get_in_tkt_with_password
Exit 1

Now, /tmp/krb5cc_8888 contains only my principal name, but no
credentials.  Also, there's no klist for v5 available on athena that I
see.  But I happen to know of one:

<40> pickled-herring:~> /afs/gza.com/system/syslib/usr/local/bin/klist
klist: Unsupported credentials cache format version number while setting cache flags (ticket cache /tmp/krb5cc_8888)
Exit 1

od -cx reveals that the file version number of this ccache file is
0x0503.  Looking at the CVS logs, I see that you've created a new
ccache format, but that code isn't extracted into the sandbox/src
tree.  This code is not present in any public krb5 release.  Is using
such incompatible code in the athena release a good idea?

		Marc

home help back first fref pref prev next nref lref last post