Sam,
I didn't need to patch the libraries at all. Since I don't use client
canonicalisation it just works and may have limited use.
[EMAIL PROTECTED]:~/sources/krb5-1.6.1-compile/src/clients/kinit> ./kinit
[EMAIL PROTECTED]@WIN2003R2.HOME
Password for [EMAIL PROTECTED]@WIN2003R2.HOME:
[EMAIL PROTECTED]:~/sources/krb5-1.6.1-compile/src/clients/kinit> klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]@WIN2003R2.HOME
Valid starting Expires Service principal
04/04/08 22:06:41 04/05/08 08:06:26 krbtgt/[EMAIL PROTECTED]
renew until 04/05/08 22:06:41, Etype (skey, tkt): ArcFour with
HMAC/md5, ArcFour with HMAC/md5
Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
I can even do an ssh to another box ( using auth_to_local =
RULE:[1:[EMAIL PROTECTED]([EMAIL PROTECTED]@WIN2003R2\.HOME$)s/.*/markus/ for
testing in
krb5.conf)
[EMAIL PROTECTED]:~/sources/krb5-1.6.1-compile/src/clients/kinit> ssh
[EMAIL PROTECTED]
Last login: Fri Apr 4 22:12:08 2008 from opensuse.suse.h
Sun Microsystems Inc. SunOS 5.11 snv_70b October 2007
-bash-3.00$ exit
logout
Connection to opensolaris closed.
[EMAIL PROTECTED]:~/sources/krb5-1.6.1-compile/src/clients/kinit> klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]@WIN2003R2.HOME
Valid starting Expires Service principal
04/04/08 22:06:41 04/05/08 08:06:26 krbtgt/[EMAIL PROTECTED]
renew until 04/05/08 22:06:41, Etype (skey, tkt): ArcFour with
HMAC/md5, ArcFour with HMAC/md5
04/04/08 22:07:34 04/05/08 08:06:26 krbtgt/[EMAIL PROTECTED]
renew until 04/05/08 22:06:41, Etype (skey, tkt): ArcFour with
HMAC/md5, ArcFour with HMAC/md5
04/04/08 22:08:30 04/05/08 08:06:26
host/[EMAIL PROTECTED]
renew until 04/05/08 22:06:41, Etype (skey, tkt): ArcFour with
HMAC/md5, ArcFour with HMAC/md5
Kerberos 4 ticket cache: /tmp/tkt1000
klist: You have no tickets cached
Regards
Markus
----- Original Message -----
From: "Sam Hartman" <[EMAIL PROTECTED]>
To: "Markus Moeller" <[EMAIL PROTECTED]>
Cc: <[email protected]>
Sent: Friday, April 04, 2008 8:53 PM
Subject: Re: Alternative UPN on Windows
>I really hope your kinit patch is not sufficient. In particular, I'm
> surprised that you don't need a library patch as well to deal with the
> name coming back in a different form and to set the canonicalize flag.
>
>
________________________________________________
Kerberos mailing list [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
