Re: SEAM krb API

2004-04-20 Thread Wyllys Ingersoll
melissa_benkyo wrote: hello all, does seam support kerberos API calls? I need to implement a kerberos I'm pretty sure this has already been answered several times, but the answer is no. The Kerberos API is not exposed to programmers when using SEAM. client app that needs to get initial

Re: SEAM krb API

2004-04-20 Thread Wyllys Ingersoll
Ken Hornstein wrote: does seam support kerberos API calls? I need to implement a kerberos client app that needs to get initial credentials and So far based on my investigation, SEAM doesn't seem to have kerberos api calls. I found krb_get_cred but I believe these are kerberos 4 API calls and

Re: SEAM krb API

2004-04-20 Thread Henry B. Hotz
According to something I read on sunsolve, on Solaris 8 Sun forgot to remove the Kerberos 4 man pages when they removed the Kerberos 4 libraries and other code. To reinforce what other people have said: 1) there is no native API for Kerberos on Solaris, you use GSSAPI, and 2) there is no

Re: SEAM krb API

2004-04-20 Thread Jeffrey Altman
Wyllys Ingersoll wrote: krb5_kuserok is sort of an abberation. Its a weak attempt at an authorization interface. Its very easy to write your own non-KRB5-API dependent version of krb5_kuserok using just GSSAPI calls and standard C library functions. Obviously, you must assume some

Re: SEAM krb API

2004-04-20 Thread Will Fiveash
On Tue, Apr 20, 2004 at 01:36:41PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:58:31PM -0400, Wyllys Ingersoll wrote: Ken Hornstein wrote: For example, I was trying to help someone once who was trying to get Simon Wilkinson's GSSAPI patch for SSH going with Solaris SEAM, and

Re: kinit sending clear text password

2004-04-20 Thread Jeffrey Altman
kinit does not send the password in clear text unless the kerberos libraries have been replaced by a trojan horse. melissa_benkyo wrote: hello folks, thanks for all the help. I wouldn't have make it here so far without your help. :) thanks. Now I'm trying to use pam api's instead but the

KFW 2.6.1

2004-04-20 Thread Dan Million
Hi. I've run Kerberos on Unix boxes for years, but never on Windows. Now I have a user who has installed the MIT KFW 2.6.1 and is having problems. He wants KRB5 tickets only. kinit from a command window always fails: kinitv524: Cannot contact any KDC for requested realm converting to

Re: KFW 2.6.1

2004-04-20 Thread Jeffrey Altman
Dan: Quoting from the release notes: System Requirements Operating System KfW requires Windows 95, 98, 98SE, ME, NT 4.0, 2000, XP, 2003 or higher. To disable the request of Kerberos 4 tickets in Leash, access the Options-Leash Properties... dialog and uncheck

kinit sending clear text password

2004-04-20 Thread melissa_benkyo
hello folks, thanks for all the help. I wouldn't have make it here so far without your help. :) thanks. Now I'm trying to use pam api's instead but the thing is pam_krb5 seems to be sending the password in clear text then I tried to use kinit username and I was shocked to see the password. (Am

Re: kinit sending clear text password

2004-04-20 Thread Will Fiveash
On Tue, Apr 20, 2004 at 01:09:53PM -0700, melissa_benkyo wrote: hello folks, thanks for all the help. I wouldn't have make it here so far without your help. :) thanks. Now I'm trying to use pam api's instead but the thing is pam_krb5 seems to be sending the password in clear text then I

Server not found in Kerberos database

2004-04-20 Thread Yan Lin
Hi, I'm a Java developer and new to Kerberos. We have a Java application that needs to be authenticated against Kerberos Active Directory. For testing purpose, we have Active Directory installed on a Win 2k server. Then, the Kerberos was turned on by a co-worker, who doesn't know much about

Change Password Implementation in krb5-1.3.3

2004-04-20 Thread K.G. Gokulavasan
Hi, I like to know which version of change password protocol is supported in the latest release krb5-1.3.3. I think it supports draft-ietf-cat-kerb-chg-password-02. If so, is there any plan of supporting draft-ietf-cat-kerberos-set-passwd-06 or draft-ietf-krb-wg-kerberos-set-passwd-01 in the

Re: SEAM krb API

2004-04-20 Thread Nicolas Williams
On Tue, Apr 20, 2004 at 02:28:20PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:36:41PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:58:31PM -0400, Wyllys Ingersoll wrote: Ken Hornstein wrote: For example, I was trying to help someone once who was trying to get

Re: Change Password Implementation in krb5-1.3.3

2004-04-20 Thread Sam Hartman
We have a client for draft-ietf-cat-kerberos-set-password but no exposed interface other than a function in krb5.h. We do plant to support draft-ietf-krb-wg-kerberos-set-password at some point in the future. --Sam Kerberos mailing list