VPN

2004-01-25 Thread Craig Hustwick
I am trying to set up a VPN with my sister in NZ. I am in Australia. We both run XP pro. She has no firewall software that she knows of and XP's firewall is switched off but I still can't get access. She Emailed her local security settings to me and your program (kerberos) is mentioned a lot.

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

2004-01-25 Thread Harald Barth
Changes in -Portable only - (dtucker) Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@ I see a potential for circular depend confusion: I need OpenSSL installed to get some libraries that Heimdal needs and I need Heimdal installed to get some libraries

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

2004-01-25 Thread Harald Barth
I think that OpenSSL != OpenSSH. Correct. I got the install order wrong. The right order is OpenSSL, Heimdal, OpenSSH. Harald. Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

2004-01-25 Thread Henry B. Hotz
At 9:07 PM +0100 1/22/04, Harald Barth wrote: I think that OpenSSL != OpenSSH. Correct. I got the install order wrong. The right order is OpenSSL, Heimdal, OpenSSH. Harald. OK, so how do you install OpenSSL with RFC 2712 support enabled? -- The opinions expressed in this message are mine, not

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

2004-01-25 Thread Johan Danielsson
Harald Barth [EMAIL PROTECTED] writes: I see a potential for circular depend confusion: I need OpenSSL installed to get some libraries that Heimdal needs and I need Heimdal installed to get some libraries that OpenSSL needs? Has anyone tested this on a clean system? I think that OpenSSL !=

Re: service principals in AD fro unix kerberos clients

2004-01-25 Thread Doug Lamoureux
Jeffrey Altman wrote: First off, the Windows Telnet service does not support Kerberos authentication therefore you cannot except to use Telnet as a test protocol from the HP system to the Windows AD. True, I was assuming that the telnet session was using pam_kerberos for authentication on

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

2004-01-25 Thread Brandon S. Allbery KF8NH
On Thu, 2004-01-22 at 04:00, Harald Barth wrote: Changes in -Portable only - (dtucker) Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@ I see a potential for circular depend confusion: I need OpenSSL installed to get some libraries that Heimdal needs

Re: service principals in AD fro unix kerberos clients

2004-01-25 Thread Doug Lamoureux
Ryan, Are you running Windows 2003? I've just run into a problem with Win2k3 encrypting the client tickets with rc4-hmac: # kinit -S host/myhost.acme.com dougl Password for [EMAIL PROTECTED]: # klist -e Ticket cache: /tmp/krb5cc_0 Default principal: host/[EMAIL PROTECTED] Valid starting