Re: Bug in Kerberos JDK 1.4.2 / Windows XP ?

2004-06-09 Thread Henry B. Hotz
I'm sure there are doc's on this, but can you configure the workstation to add a correct-for-MIT/Heimdal default realm? (name canonicalization? or is that only on the server end?) On Jun 8, 2004, at 8:19 AM, [EMAIL PROTECTED] wrote: From: Jeffrey Altman [mailto:[EMAIL PROTECTED] Sent:

maxlife parameter not being honored?!

2004-06-09 Thread Gary LaVoy
It appears that if I change the maxlife parameter in kdc.conf to something whatever I had it set for then I originally created the principal DB, it will not be honored and the maximum life time I can assign to a user ticket is limited to whatever it was when I set up the db. ex: from

Re: maxlife parameter not being honored?!

2004-06-09 Thread Ken Raeburn
The maximum ticket lifetime data is stored in the database for *all* principals -- the user, the TGS, and the application service. The KDC will use all of those (as well as the lifetime of the TGT, when getting additional tickets) in computing the maximum allowable lifetime of tickets it

Re: maxlife parameter not being honored?!

2004-06-09 Thread Tom Yu
Gary == Gary LaVoy [EMAIL PROTECTED] writes: Gary It appears that if I change the maxlife parameter in kdc.conf to Gary something whatever I had it set for then I originally created the Gary principal DB, it will not be honored and the maximum life time I can Gary assign to a user ticket is

step by step guide for Windows 2003 Server and MIT Kerberos trust?

2004-06-09 Thread D. Schikora
Hallo Is there anywhere one guide for Kerberos and Windows 2003 Server. I can only find the old one for W2K and I hope there are some changes between W2K and W2K3. thanks Dominik Kerberos mailing list [EMAIL PROTECTED]

Benchmarking kftp and ftp

2004-06-09 Thread Mr Self Destruct
Hello, I'm currently writing benchmarks to compare the speed of ftp vs kftp. I have three computers on a 100 mb/s LAN. One is the kdc, one is a client, the third is the ftp server. All computers are running on Debian 3. 1) The benchmark for ftp is based on the command time. I'm timing the whole

I forgot some stuff ..

2004-06-09 Thread Mr Self Destruct
On Wed, 09 Jun 2004 00:06:37 +0200, Mr Self Destruct wrote: I forgot some important things : I'm using the MIT sources, compiled with the option not to install kerberos 4. 2) I'm using the kerberos ftp deamon for my benchmark on kftp (not proftpd) Hello, I'm currently writing benchmarks

OK that's fixed

2004-06-09 Thread Mr Self Destruct
I finally read the script after some rest :o) ... and I find an error in it... On Wed, 09 Jun 2004 00:18:46 +0200, Mr Self Destruct wrote: On Wed, 09 Jun 2004 00:06:37 +0200, Mr Self Destruct wrote: I forgot some important things : I'm using the MIT sources, compiled with the option

problem with ktpass Windows 2003 Server

2004-06-09 Thread Akbar Lin
Dear sir, I just read the mail from Mr. Rouiller Claude about the problem he had when using ktpass with mapuser option. Well, I have the same problem right now. Do you know how to solve this problem ? Many thanks in advance, Best regards, Akbar Lin =message from Rouiller

Kerberos: about account in realm

2004-06-09 Thread nuspran
Dear folks: I am a graduate student of EECS, National Taiwan University, R.O.C. My name is Chi-Chia, Lin. I'm now trying to use Kerberos services, but I encounter a problem getting an account in remote realm ATHENA.MIT.EDU. I have downloaded leash and installed it. My windows 2000

Re: Kerberos: about account in realm

2004-06-09 Thread Jeffrey Altman
You have to be a member of the MIT community in order to obtain an account within MIT's realm. If you wish to use Kerberos you must use a realm that is manages by someone that knows you and will be willing to share a secret with you. Jeffrey Altman nuspran wrote: Dear folks: I am a

Re: step by step guide for Windows 2003 Server and MIT Kerberos trust?

2004-06-09 Thread Douglas E. Engert
D. Schikora wrote: Hallo Is there anywhere one guide for Kerberos and Windows 2003 Server. I can only find the old one for W2K and I hope there are some changes between W2K and W2K3. Not that I know of. Note that when you use ktpass command and use the DesOnly flag, this is saved in

Re: storing tickets in memory

2004-06-09 Thread Ken Raeburn
On Jun 9, 2004, at 10:48, Adam Denenberg wrote: i am not on the list so please CC me in reply to the message. I am doing some kerberos research and I am trying to see if there is a way to store the ticket credentials cache in memory instead of a file in /tmp (for security reasons). Is this a