Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Alan Buxey
What you are doing is actually okay (its one of those exceptions where auth-type needs to be present as the server has no idea to use krb5). I wonder if your server has been built with kerberos support? alan -- This smartphone uses free WiFi around the world with eduroam, now that's what I

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Iliya Peregoudov
From http://wiki.freeradius.org/modules/Rlm_krb5: Make sure the keytab is readable by the user that is used to run radiusd... On 27.03.2013 7:09, Jaap Winius wrote: rlm_krb5: verify_krb_v5_tgt: host key not found : Permission denied - List info/subscribe/unsubscribe? See

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Matthew Newton
On Wed, Mar 27, 2013 at 04:09:09AM +0100, Jaap Winius wrote: Quoting Phil Mayers p.may...@imperial.ac.uk: ... you should be using 2.2.0 or 2.2.1 when it's release, as the 2.1.10/11/12 releasea have a known security issue. I'll be sure to install 2.2.x as soon as a Debian package becomes

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Alan Buxey a.l.m.bu...@lboro.ac.uk: ... I wonder if your server has been built with kerberos support? Indeed it has. The machine in question not only runs Freeradius, but also the Kerberos KDC, kadmin server and Kerberos client software. That all works, and it still works with

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Phil Mayers
On 27/03/13 13:55, Jaap Winius wrote: Quoting Alan Buxey a.l.m.bu...@lboro.ac.uk: ... I wonder if your server has been built with kerberos support? Indeed it has. The machine in question not only runs Freeradius, but also the Kerberos KDC, kadmin server and Kerberos client software. That all

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Iliya Peregoudov iperegu...@cboss.ru: From http://wiki.freeradius.org/modules/Rlm_krb5: Make sure the keytab is readable by the user that is used to run radiusd... On 27.03.2013 7:09, Jaap Winius wrote: rlm_krb5: verify_krb_v5_tgt: host key not found : Permission denied You're

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Jaap Winius
Quoting Matthew Newton m...@leicester.ac.uk: For what it's worth, rolling your own FreeRADIUS packages for Debian is trivial. http://wiki.freeradius.org/building/Build#Building-Debian-packages Right you are! Very good indeed. Sure beats installing directly from source. Now I've got the

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-27 Thread Matthew Newton
On Wed, Mar 27, 2013 at 07:06:09PM +0100, Jaap Winius wrote: That's interesting, but without a copy of the debug output from radiusd -X, nobody will know where to start. I included what I thought was the most relevant output from 'freeradius -X', because the entire exchanges were about 12

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-26 Thread Phil Mayers
On 03/25/2013 11:42 PM, Jaap Winius wrote: Is this new behavior intentional, or is it simply a bug? In either case, is there a workaround or a code fix for this, or should I continue to use 2.1.10? Actually neither - you should be using 2.2.0 or 2.2.1 when it's release, as the 2.1.10/11/12

Re: Auth-Type krb5 not recognized by v2.1.12

2013-03-26 Thread Jaap Winius
Quoting Phil Mayers p.may...@imperial.ac.uk: ... you should be using 2.2.0 or 2.2.1 when it's release, as the 2.1.10/11/12 releasea have a known security issue. I'll be sure to install 2.2.x as soon as a Debian package becomes available for it, but for now I'm going to stick with 2.1.x. I