Hi:
I compiled Kerberos 1.2.2 on HPUX 11.00 with "+DD64" flag passed to
cc compiler, which means all
the binaries will be in 64 bit format.
Everything so far works fine except for /usr/local/sbin/kadmin. Here
is what happens when I run kadmin
trying to connect to a kadmind & krb5kdc running on another Unix box:
%
% /usr/local/sbin/kadmin
Authenticating as principal [EMAIL PROTECTED] with password.
Enter password:
kadmin: GSS-API (or Kerberos) error while initializing kadmin
interface
%
In KDC's /var/log/kadmin.log file, I can see that (xxx is the
machine's IP address):
kadmind[4342](Notice): Authentication attempt failed: xxx.xxx.xxx.xxx,
GSS-API error strings are:
kadmind[4342](Notice): A token was invalid
kadmind[4342](Notice): Token header is malformed or corrupt
kadmind[4342](Notice): GSS-API error strings complet
I did some troubleshootings, finally the problem being traced back
to system call "clnt_call()" around line #287 in
./Kerberos/src/lib/rpc/auth_gssapi.c where "call_res" gets its value by
calling "clnt_call()". The program exit around line #329 when the value
of "call_res.gss_major" is checked and found invalid.
The interesting part is that I'm not sure whether this is a bug in
HPUX 11 64 bit RPC library or a bug with Kerberos 122. Because
clnt_call() actually returns "RPC_SUCCESS" as exit code, but yet gets
invalid value for "call_res.gss_major".
Can somebody who runs 64 bit Kerberos on HPUX 11 test whether kadmin
works or not ? My KDC has no problem, because we can run kadmin from
other (SGI, SUN, HPUX10.20) Kerberos systems without any problem.
If this is a bug, then just treat my message a bug report.
Thanks
Jin
-----------------------------------
