[27836] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Different Heimdal/MIT behaviour of krb5_get_credentials ?

daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Thu May 31 21:20:20 2007

In-Reply-To: <f3n3ug$i6$1@sea.gmane.org>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <65054D89-41A4-4CA7-B6A1-9C5059848416@jpl.nasa.gov>
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: Thu, 31 May 2007 18:20:02 -0700
To: heimdal-discuss@sics.se, "Markus Moeller" <huaraz@moeller.plus.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


On May 31, 2007, at 11:25 AM, Markus Moeller wrote:

> I have a AD forest with MM.COM with domains DOM1.MM.COM,DOM2.MM.COM  
> and
> SUB.DOM2.MM.COM which all trust each other. To test the  
> availability of
> service tickets I created the following short program:

Any particular reason you didn't use kvno (MIT) and kgetcred (Heimdal)?

To properly debug the problem you probably want to look at the kdc  
logs to see what actually got requested as compared to what's  
available.  You can also get that info from a tcpdump/snoop, but it's  
not as easy.

------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post