Douglas E. Engert's patch installs fairly easily on 1.3.1.
http://mailman.mit.edu/pipermail/krbdev/2003-August/001917.html.
It makes it practicable to use an AD KDC with older UDP-only
Kerberos apps. So please include it or equivalent. KX509 is
the application of interest to me, as per this example:

  $ kinit
  Password for [EMAIL PROTECTED]: 
  $ kx509
  Weird!  KX509 transmit packet is too large!
  $ kdestroy
  $ /opt/krb5/bin/kinit -m
  Password for [EMAIL PROTECTED]: 
  $ kx509
  Timed out waiting for response from a Kerberized Certificate Authority

As you can see there is no KCA running during this series.
Without -m it doesn't get as far as trying to contact kca.

Bob

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to