[25139] in Kerberos
Re: kfw-3.0 can't obtain tickets from heimdal kdc 0.7.1(Bad address
daemon@ATHENA.MIT.EDU (jay alvarez)
Thu Dec 15 20:04:21 2005
Message-ID: <20051216010337.90486.qmail@web32612.mail.mud.yahoo.com>
Date: Thu, 15 Dec 2005 17:03:37 -0800 (PST)
From: jay alvarez <kerber0sb0y@yahoo.com>
To: Jeffrey Altman <jaltman2@nyc.rr.com>, kerberos@mit.edu
In-Reply-To: <cmeof.39$Y42.36@news-wrt-01.rdc-nyc.rr.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Jeffrey Altman <jaltman2@nyc.rr.com> wrote: Both of the Heimdal KDCs I have access to work fine but I do
not know what version of Heimdal they are using.
Before, I use to have a heimdal-0.6.x + Leash ticket manager(kfw2.6.5) and it is working fine also.
NetIdMgr will not request a ticket using addresses.
I guess this is true as I cannot find a checkbox or option button anywhere in the NetIDMgr where this can be set.
An "incorrect net address" error should mean that the addresses within theticket do not correspond to any of the addresses listed in
the ticket request.
Do you have a [libdefaults] entry "noaddresses = false" ?
If so, does it make a difference if you change it to "true"?
"noaddresses = false" only works with Leash and not with NetIDMgr. From Leash, I can obtain tickets when this is set to false but not with NetIDMgr.
Also, when I use the putty-with-gssapi found at this link:
http://www.sweb.cz/v_t_m/
http://www.sweb.cz/v_t_m/putty/PuTTY-0.58-GSSAPI-2005-07-24.zip
using tickets obtained by Leash on a heimdal 0.7.1 kdc
I get an error in the sshd debugging window saying:
"encryption type 18 not supported"
Is this the ticket encryption type or the ssh encryption type?
Jeffrey Altman
---------------------------------
Yahoo! Shopping
Find Great Deals on Holiday Gifts at Yahoo! Shopping
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
