[27252] in Kerberos
problem:Hi i want to test Keberos Interoperatability with windows and
daemon@ATHENA.MIT.EDU (Eswar S)
Wed Jan 24 09:31:08 2007
Date: Wed, 24 Jan 2007 08:43:44 +0530
From: Eswar S <eswars@huawei.com>
In-reply-to: <mailman.0.1169606361.6626.kerberos@mit.edu>
To: kerberos@mit.edu
Message-id: <005201c73f65$ae39d160$0c12120a@china.huawei.com>
MIME-version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi all,
I have the KDC in windows 2003 server.kerberos client I am running at linux
machine. I have added on user in my AD as gssserver . same gssserver account
I am able to login from linux machine. I am getting TGT.But I am not able to
run gss-server sample application.
./gss-server test/linux.gxboss.com@GXBOSS.COM
GSS-API error acquiring credentials: Unspecified GSS failure. Minor code
may provide more information
GSS-API error acquiring credentials: No such file or directory
I wanted an environment like sspiclient (gssclient) in windows should
mutually authenticate linux gssserver using same windows KDC.
Can please help me
C:\Program Files\Resource Kit>SETSPN -A test/linux gssserver
Registering ServicePrincipalNames for CN=gssserver,CN=Users,DC=gxboss,DC=com
test/linux
Updated object
C:\Program Files\Resource Kit>Setspn.exe -L gssserver
Registered ServicePrincipalNames for CN=gssserver,CN=Users,DC=gxboss,DC=com:
test/linux
sample/linux.gxboss.com
host/linux.gxboss.com
host/linux
gssserver/gssserver
C:\ktpass>ktpass -out test.keytab -princ test/linux.gxboss.com@GXBOSS.COM
-pass infoseclab -crypto DES-CBC-CRC -ptype KRB5_NT_PRINCIPAL -kvno 9
Key created.
Output keytab to test.keytab:
Keytab version: 0x502
keysize 59 test/linux.gxboss.com@GXBOSS.COM ptype 1 (KRB5_NT_PRINCIPAL) vno
9 et
ype 0x1 (DES-CBC-CRC) keylength 8 (0xc4da9d4591a21c76)
I transferred this key tab file to Linux machine and merged with
/etc/krb5.keytab using ktutil
I am not able to execute gss-server.......... please give a solution , I am
struggling for this problem from so long time.
Thank you
Eswar S
****************************************************************************
****************************
This e-mail and attachments contain confidential information from HUAWEI,
which is intended only for the person or entity whose address is listed
above. Any use of the information contained herein in any way (including,
but not limited to, total or partial disclosure, reproduction, or
dissemination) by persons other than the intended recipient's) is
prohibited. If you receive this e-mail in error, please notify the sender by
phone or email immediately and delete it!
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
