[4065] in arla-drinkers
Re: mac osx arla ticket forwarding problem
daemon@ATHENA.MIT.EDU (Harald Barth)
Thu Nov 9 05:55:57 2006
From arla-drinkers-bounces@stacken.kth.se Thu Nov 09 10:55:57 2006
Return-Path: <arla-drinkers-bounces@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 11459 invoked from network); 9 Nov 2006 10:55:56 -0000
Received: from mx3.kth.se (130.237.48.97)
by charon.mit.edu with SMTP; 9 Nov 2006 10:55:56 -0000
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx3.kth.se (Postfix) with ESMTP id E73281409BC;
Thu, 9 Nov 2006 11:55:55 +0100 (CET)
Received: from mx3.kth.se ([127.0.0.1])
by localhost (mx3.kth.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 14444-01-59; Thu, 9 Nov 2006 11:55:51 +0100 (CET)
Received: from tapas.stacken.kth.se (tapas.stacken.kth.se [130.237.234.140])
by mx3.kth.se (Postfix) with ESMTP id E197A140685;
Thu, 9 Nov 2006 11:55:48 +0100 (CET)
Received: from tapas.stacken.kth.se (localhost [127.0.0.1])
by tapas.stacken.kth.se (Postfix) with ESMTP id 486F553511;
Thu, 9 Nov 2006 11:55:48 +0100 (CET)
X-Original-To: arla-drinkers@tapas.stacken.kth.se
Delivered-To: arla-drinkers@tapas.stacken.kth.se
Received: from brev.stacken.kth.se (brev.stacken.kth.se [130.237.234.84])
by tapas.stacken.kth.se (Postfix) with ESMTP id 9A68453511
for <arla-drinkers@tapas.stacken.kth.se>;
Thu, 9 Nov 2006 11:55:45 +0100 (CET)
Received: from mx1.kth.se (mx1.kth.se [130.237.32.140])
by brev.stacken.kth.se (8.12.10/8.12.10) with ESMTP id kA9AtjPM023180
for <arla-drinkers@stacken.kth.se>; Thu, 9 Nov 2006 11:55:45 +0100 (MET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx1.kth.se (Postfix) with ESMTP id CF29C140ABA;
Thu, 9 Nov 2006 11:55:44 +0100 (CET)
Received: from mx1.kth.se ([127.0.0.1])
by localhost (mx1.kth.se [127.0.0.1]) (amavisd-new,
port 10024) with LMTP
id 03900-01-23; Thu, 9 Nov 2006 11:55:42 +0100 (CET)
Received: from localhost (habarber.pdc.kth.se [130.237.221.63])
by mx1.kth.se (Postfix) with ESMTP id D4C0A14053A;
Thu, 9 Nov 2006 11:55:42 +0100 (CET)
Date: Thu, 09 Nov 2006 11:56:10 +0100 (MET)
Message-Id: <20061109.115610.122323279.haba@habarber.pdc.kth.se>
To: vahtras@pdc.kth.se
Subject: Re: mac osx arla ticket forwarding problem
From: Harald Barth <haba@pdc.kth.se>
In-Reply-To: <20061109091034.GA608@pdcs-ibook-g4.local>
References: <20061109091034.GA608@pdcs-ibook-g4.local>
X-Mailer: Mew version 4.2 on Emacs 21.4 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
X-Virus-Scanned: by amavisd-new at kth.se
X-Spam-Status: No, hits=-4.9 tagged_above=-200.0 required=5.0 tests=BAYES_00
X-Spam-Level:
Cc: support@pdc.kth.se, arla-drinkers@stacken.kth.se
X-BeenThere: arla-drinkers@stacken.kth.se
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: Arla discussions <arla-drinkers.stacken.kth.se>
List-Unsubscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=unsubscribe>
List-Archive: <http://lists.stacken.kth.se/pipermail/arla-drinkers>
List-Post: <mailto:arla-drinkers@stacken.kth.se>
List-Help: <mailto:arla-drinkers-request@stacken.kth.se?subject=help>
List-Subscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=subscribe>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Sender: arla-drinkers-bounces@stacken.kth.se
Errors-To: arla-drinkers-bounces@stacken.kth.se
X-Virus-Scanned: by amavisd-new at kth.se
> Skillnad p=E5 -f och -F:
arla-drinkers is an english speaking mailing list. However,
this is probably a question for the also english speaking
heimdal-discuss mailing list.
The problem here is that telnet/telnetd in heimdal 0.7.2 has a bug
which in certain combinations prevents ticket forwarding to work
correctly between machines with different endianess. Sometimes this
can be worked around by using addressless tickets, sometimes not. I
don't have a list of combinations that work and which won't, the
matrix would include at least 2 versions, 4 combinations of endianess,
2 for tickets with and without addresses... you see where this is
leading. This bug was fixed on the server (telnetd) you connect to. It
is probably not fixed on the client you use, because the dmg which
contains the fix has not been released "publicly" (or what you want to
call it) yet. Tol was very nice and fixed an arla dmg with the
bugfixed heimdal binaries for me, but the right way would be to
release an heimdal dmg with the bugfixed programs needed (for arla,
you only need kinit and afslog, so telnet is just a bonus).
file:///afs/stacken.kth.se/ftp/pub/random/tol/arla-0.43-haba.dmg
ftp://ftp.stacken.kth.se/pub/random/tol/arla-0.43-haba.dmg
Testing of the above version has been 'limited' (or how you best want
to call it).
I'm still hoping for heimdal 0.7.3 or 0.8 to appear. It would be very
nice to have a heimdal dmg but I doubt we will see that from the
heimdal authors as their time is limited and I overheard that it
is not high on the priority list, partly because OSX ships with
ssh/sshd including key excahnge and ticket forwarding. A rollout
of sshd on the server side at PDC would have been faster if
it would not be for lacking key exchande support, see:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=3D187211
http://bugzilla.mindrot.org/show_bug.cgi?id=3D1242
which means that we have to craft our own ssh RPMs. That takes time.
Apple and Sun ship it with the OS. =
Back to telnet...
You can use the following trick to see if you have a new enough telnet:
$ gdb /usr/arla/bin/telnet =
(...blabla...)
(gdb) break main
Breakpoint 1 at 0x7670: file ../../../../heimdal-20060921/appl/telnet/telne=
t/main.c, line 167.
(gdb) run =
Starting program: /usr/arla/bin/telnet =
Reading symbols for shared libraries .++++++ done
Breakpoint 1, main (argc=3D<incomplete type>, argv=3D0xbffffb14) at ../../.=
./../heimdal-20060921/appl/telnet/telnet/main.c:167
167 ../../../../heimdal-20060921/appl/telnet/telnet/main.c: No such fil=
e or directory.
in ../../../../heimdal-20060921/appl/telnet/telnet/main.c
And here you can see the snapshot date heimdal-20060921 which is "good enou=
gh".
Harald.
_______________________________________________
Arla-drinkers mailing list
Arla-drinkers@stacken.kth.se
https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers
