Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Jeffrey Altman
Chet Burgess wrote: It is important to note that even if you have the REALM and KDC(s) listed in the file properly the library will still try DNS first, so you MUST add dns_fallback = false to turn off the resolver calls. I am fairly sure that DNS is not used in preference to the

Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Chet Burgess
On Wed, Aug 17, 2005 at 12:07:40PM +, Jeffrey Altman wrote: Chet Burgess wrote: It is important to note that even if you have the REALM and KDC(s) listed in the file properly the library will still try DNS first, so you MUST add dns_fallback = false to turn off the resolver calls.

Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Donn Cave
In article [EMAIL PROTECTED], [EMAIL PROTECTED] (Chet Burgess) wrote: [ ... re memory leak caused by DNS KDC lookup ... ] The res_ninit() call and the subsequent calls for the DNS records are made in the krb5int_dns_init function found at src/lib/krb5/os. The res_ninit() call is made for

Re: Is setspn necessary for linux service?

2005-08-17 Thread abc
i don't think you need to run setspn for host principal Yes you need run when you want to http principal. microsoft provide some by default. s- Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Kerberos and IE Single Sign-on

2005-08-17 Thread mnikhil . juno
Luciano Bolonheis wrote: Hi, i'm trying to make a Single sign-on environment... and I have all the possible problems... using the mod_auth_kerb with apache in internet explorer, it authenticate but asks for the password. I get a ticket with the Kfw Leash32 application, and even with valid

After net ads join, kinit fails: Client not found...

2005-08-17 Thread P V
I'm installing Samba with Security ADS (compiled --with-winbind --with-ads --with-ldap --with-krb5) on Solaris 8, for connect with ActiveDirectory W2K. First, I created in AD Windows an account with the same name that my solaris host and generated the keytab with this: C:\tempktpass princ

Telnetd Fails - Telnetd - Slave failed to initialize

2005-08-17 Thread sirius2525
I've compiled MIT kerberos 1.4.2 on Debian Linux. I've configured inetd.conf to use the kerberized telnetd I'm able to get a ticket but if I tried and connect with a kerberized telnet client I get the following: telnetd: Failed to chown slave side of pty: Operation not permitted . telnetd: Slave

Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Chet Burgess
On Wed, Aug 17, 2005 at 11:51:08AM -0700, Donn Cave wrote: That's weird, but there are some potential surprises. For an example I ran into myself, if your initial request fails, it will be retried to the configured master_kdc. Of course if that isn't in krb5.conf it will go to DNS

Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Tom Yu
res_ninit() wasn't the only source of the leak. Ticket #3147 covers a different leak, which resulted from not freeing some profile strings. ---Tom Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Memory Leak problems with krb5_get_init_creds_password?

2005-08-17 Thread Chet Burgess
On Wed, Aug 17, 2005 at 03:19:52PM -0400, Tom Yu wrote: res_ninit() wasn't the only source of the leak. Ticket #3147 covers a different leak, which resulted from not freeing some profile strings. Yeah I saw that in the reference. I was using that an evidence that the developers