Re: BC-SNC, MIT Kerberos V, SSO, GSS-API v2

[Calin Barbat]

Hello,
Norbert, you were right. I just tried to play around (locally) with the 
sserver/sclient from krb5-1.3.4/src/appl/sample and I got the following 
messages:

   In /var/log/messages something like:
       sserver: recvauth failed--Software caused connection abort
   And from sclient:
       connected
       ./sclient: Ticket expired while using sendauth
I used following commands:
   ./sserver -p 8888 -s host/<myhost>.<mydomain2>.<mydomain1>.de -S 
/etc/krb5.keytab

and
   ./sclient <myhost>.<mydomain2>.<mydomain1>.de 8888 
host/<myhost>.<mydomain2>.<mydomain1>.de

Any idea about the cause of this behaviour?
Calin.
Norbert Klasen wrote:
some hints you might want to try:
- use MIT Kerberos 1.3.x. It implements the native Windows enctype
arcfour-hmac-md5 and supports TCP to connect to the KDC. (unlikely)
- test if you can successfully establish a GSSAPI connection between your
Windows workstation and your Unix server with gss-client and gss-server
(Windows versions are included in the KfW package).
Norbert

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos