[25069] in Kerberos
Re: Telnet authentication problem
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Dec 6 23:05:39 2005
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <iIljf.37717$u43.32187@twister.nyc.rr.com>
Date: Wed, 30 Nov 2005 17:55:26 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Inger, Slav (.) wrote:
> Hello,
>
> Having an issue getting telnetd and telnet to work together to enable
> single sign-on. Have the latest MIT Kerberos distribution, compiled and
> running on Debian Linux. Can get TGTs, gss-client/gss-server are
> working fine, and I can get single sign-on with rlogin/klogind. But not
> with telnet. inetd is invoking telnetd with '-a valid' flag, but it's
> always prompting me for a password with the TGT already present. When I
> run 'klist' afterwards, no TGS was obtained. And if I request an
> ecrypted telnet session, telnetd comes back with "authorization failed".
> Auth is taking place within a single realm.
>
> Any ideas? TIA!
Your service principals do not have single DES enctypes. The MIT
Telnet only supports single DES. The Telnet distribution from
http://srp.stanford.edu contains support for the triple DES extensions.
Jeffrey Altman
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
