[32971] in Kerberos

home help back first fref pref prev next nref lref last post

MacOSX 10.6 pkinit problem with 1.8.3 KDC

daemon@ATHENA.MIT.EDU (Glenn Machin)
Sat Dec 18 22:04:40 2010

Message-ID: <4D0C398A.8010302@sandia.gov>
Date: Fri, 17 Dec 2010 21:33:14 -0700
From: "Glenn Machin" <gmachin@sandia.gov>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: multipart/mixed;
 boundary=------------040901060003060805050307
Errors-To: kerberos-bounces@mit.edu


--------------040901060003060805050307
Content-Type: text/plain;
 charset=iso-8859-1;
 format=flowed
Content-Transfer-Encoding: 7bit

I am testing MacOSX 10.6 pkinit capabilities using a PIV card per the 
attached Apple pkinit configuration document.

When I test against the MIT 1.8.3 KDC using the command:
/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kinit -C 
KEYCHAIN: -D KEYCHAIN:

The MIT 1.8.3 KDC fails with error:
     cms_signeddata_verify: failed to decode message: 
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

Using the MIT 1.8.3 kinit on the same Mac works fines.

Any idea what the problem might be?


Glenn


--------------040901060003060805050307
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--------------040901060003060805050307--


home help back first fref pref prev next nref lref last post