[28237] in Kerberos
Re: Solaris K5, MIT K5 compatibility issues
daemon@ATHENA.MIT.EDU (Tom Yu)
Fri Aug 10 09:17:13 2007
To: Mike Friedman <mikef@ack.berkeley.edu>
From: Tom Yu <tlyu@mit.edu>
Date: Fri, 10 Aug 2007 09:17:01 -0400
In-Reply-To: <20070810023231.GA14425@sun.com> (Will Fiveash's message of "Thu,
9 Aug 2007 21:32:31 -0500")
Message-ID: <ldvzm0zy1f6.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>>>>> "Will" == Will Fiveash <William.Fiveash@sun.com> writes:
Will> This is a long standing issue between MIT and Sun regarding the kadmin
Will> related principals. For more read:
Will> http://krbdev.mit.edu/rt/Ticket/Display.html?id=3064
Will> The workaround on Solaris 10 is to set:
Will> kpasswd_protocol = SET_CHANGE
Will> in krb5.conf. Other than this Solaris 10 should be very compatible with
Will> a MIT KDC.
I think the problem mentioned in #3064 applies to 1.4.x as well as
1.6.x kadminds, so perhaps this is a different problem. Getting logs
from the KDC to see what principals are actually requested by the
kadmin client may help. Thanks for the reminder about #3064. I'll
try to take another look at it.
---Tom
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
