On Mar 4, 2005, at 9:01 AM, [EMAIL PROTECTED] wrote:

Date: 4 Mar 2005 04:17:04 -0800
From: "KV2" <[EMAIL PROTECTED]>
To: [email protected]
Subject: joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux
 (krb5-1.3.5) error
Message-ID: <[EMAIL PROTECTED]>
Precedence: list
Message: 7

Hello, I get following errors when trying set up kerberos on netbsd
1.6.1 system:
 netb#  kadmin
 kadmin> list princs
 root/[EMAIL PROTECTED]'s Password:
 ---if wrong password given, it prints "get princs: Incorrect
password"and give up,
     if the password matches than kadmin sleep forever on  READ call,
(from ktrace/kdump output)...

The authentication and password change protocols are standard. The admin protocol isn't. You can't use a Heimdal kadmin with an MIT kadmind.


 Configuration of realm is simple: main kdc on linux with MIT
krb5-1.3.5, there are some other linux system on net, successfuly
using kerberos in auth to telnet, ftp services, /etc/krb5.conf on
systems are exactly identical.

 Is it version incompability or config error?  What should I do - I
think install mit krb on this system surely help, but is there other
ways, some people told me that heimdal totally compatible with MIT, is
it right?

"on the wire" the basic authentication protocol is very compatible. Not sure how far back the password change compatibility works. Generally you should have no problems with a NetBSD/Heimdal client and an MIT server (as I think you are trying).


Note that the Heimdal in NetBSD 1.6.1 is fairly old. Version 0.5-something at best, while they are working on 0.7 now.

  I'am almost totally new in using kerberos, any help appreciated.

   Thanks in advance :-)
  Vladimir.

------------------------------------------------------------------------ ----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
[EMAIL PROTECTED], or [EMAIL PROTECTED]


________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to