I also found this from kfw release notes. The MSLSA: credential cache relies on the ability to extract the entire Kerberos ticket including the session key from the Kerberos LSA. In an attempt to increase security Microsoft has begun to implement a feature by which they no longer export the session keys for Ticket Getting Tickets. This has the side effect of making them useless to the MIT krb5 library when attempting to request additional service tickets.
This new feature has been seen in Windows 2003 Server, Windows 2000 Server SP4, and Windows XP SP2 Beta. We assume that it will be implemented in all future Microsoft operating systems supporting the Kerberos SSPI. Microsoft does work closely with MIT and has provided a registry key to disable this new feature. Can this be a factor for not being able to run the gss-server???? Where can I find this registry key to disable this new feature as I am using windows 2003. Thanks Vikas [EMAIL PROTECTED] (Vikas Gandhi) wrote in message news:<[EMAIL PROTECTED]>... > Hi Jeffrey > I made a new user mittest thru Administrator. Then I created a new > krb5kt file. > ktpass ?princ mittest/beetle.qdms.co.in ?mapuser mittest -pass > mittest -out krb5kt > I copied the file to %WINDIR% and the place where I was running the > gss-server.exe and I am getting the same error. > gss-server.exe -port 5555 -verbose test > GSS-API error acquiring credentials: Miscellaneous failure > GSS-API error acquiring credentials: No such file or directory > > FYI: I have successfully run the SSPI samples and also run the against > GSSAPI samples in unix. So I feed there is something which I am not > able to understand. > > Can u please guide me further. > Regards > Vikas > > Jeffrey Altman <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > > You need a keytab file for the gss-server.exe because the service > > must know its key. If it does not know its key, then it cannot > > decode the service ticket presented to it by the gss client. > > > > Jeffrey Altman > > > > > > Vikas Gandhi wrote: > > > Why do need krb5kt for ???? It is no where. > > > I understand that krb5kt is equivalent of keytab in unix. > > > But I know that there is no use of kinit but as I do not know the real > > > problem I was just trying my way to assess what is the answer to it. > > > Next can I understand/debug more things than what I see...some debug > > > option in samples. > > > Jeffrey where actually I am faulting ???? > > > > > > Regards > > > Vikas ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
