[28475] in Kerberos
domain trusts => saslauthd
daemon@ATHENA.MIT.EDU (kerberos@mynx.org)
Mon Sep 24 09:37:17 2007
Message-ID: <20070924153655.quc3dwuggo4w8owo@webmail.mynx.org>
Date: Mon, 24 Sep 2007 15:36:55 +0200
From: kerberos@mynx.org
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
hello folks,
I'm not quite sure if this fits in here, but anyway maybe some one can
help me.
I got a problem with domain trusts and saslauthd.
To be specific, I got a kerberos domain(UNIX.SAMPLE.COM) and an active
directory domain(WIN.SAMPLE.COM).
I made an one way trust, so windows user can login onto the unix hosts.
On the unix shell kinit user@WIN.SAMPLE.COM is working.
But if I do the same with testsaslauthd -u user -p password -r WIN.SAMPLE.COM
i'm getting 0: NO "authentication failed"
logs are filled with...
syslog:
Sep 24 15:28:29 host01 saslauthd[4265]: auth_krb5: k5support_verify_tgt
Sep 24 15:28:29 host01 saslauthd[4265]: do_auth : auth
failure: [user=user] [service=imap] [realm=WIN.SAMPLE.COM]
[mech=kerberos5] [reason=saslauthd internal error]
krb5kdc.log:
Sep 24 15:28:29 host01.unix.sample.com krb5kdc[4634](info): TGS_REQ (7
etypes {18 17 16 23 1 3 2}) 192.168.2.10: PROCESS_TGS: authtime 0,
<unknown client> for host/host01.unix.sample.com@UNIX.SAMPLE.COM, Key
table entry not found
Sep 24 15:28:29 host01.unix.sample.com krb5kdc[4634](info): TGS_REQ (7
etypes {18 17 16 23 1 3 2}) 192.168.2.10: PROCESS_TGS: authtime 0,
<unknown client> for host/host01.unix.sample.com@UNIX.SAMPLE.COM, Key
table entry not found
any ideas?
regards
Rainhard
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
