[28269] in Kerberos
Re: NIS => Kerberos/LDAP Migration
daemon@ATHENA.MIT.EDU (Tim Schaab)
Wed Aug 15 13:50:10 2007
Message-ID: <46C33C9F.7040308@geology.wisc.edu>
Date: Wed, 15 Aug 2007 12:49:19 -0500
From: Tim Schaab <tim@geology.wisc.edu>
MIME-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <46C1C44D.2030801@anl.gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Some progress.
I removed the krb5_get_policy lines from the pam-krb5-migrate.c file and
it compiles and loads into PAM now.
Now that problem is solved, another pokes up. The logins hang and
timeout. It looks like the module gets it's ticket from the kdc, but
then hangs tying to talk to kadmin. There is nothing in the kadmin log
about a pam connection attempt at all. It is the same problem I saw
trying to use the heimdal kadmin client on a MIT kadmin server. When a
command is issued, it hangs.
My belief is that using the remote kadmin part of pam-krb5-migrate is
incompatible with a MIT kadmin server.
The next step would be to try the local db support. Though if it's using
heimdal and we are using MIT, are the local DBs compatible?
Another option would be to run a heimdal kadmin server during the
transition. Once again though, I am not sure this would work unless they
both use the same db format.
Are the heimdal and MIT databases compatible? If not, any ideas to have
an as user-friendly transition from NIS to Kerberos as possible?
- --
/*********************************************************\
| Tim Schaab | Computer Facilities |
| 608-262-3738 | tim@geology.wisc.edu |
| UW-Madison | Geology & Geophysics |
\******** GPG Key: http://dev-zero.org/pubkey.asc ********/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGwzyfCR3ITS1QXGYRAlxbAKCTsElVrDWz+Q6TkDHSwI/j2g0AKQCgkSm/
R/M6GiTFmhGys7+QlSWIBlU=
=VeZu
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
