Re: Presence/absence of the keytab

2006-05-04 Thread Richard E. Silverman
SL == Scott Lowe [EMAIL PROTECTED] writes: SL Yesterday, however, I was able to successfully authenticate via SL Kerberos from VMware ESX Server 2.5.3 (the console operating SL system is Linux-based) *without* generating a keytab. This seems SL to fly in the face of all the

Re: Presence/absence of the keytab

2006-05-04 Thread Donn Cave
In article [EMAIL PROTECTED], Richard E. Silverman [EMAIL PROTECTED] wrote: SL == Scott Lowe [EMAIL PROTECTED] writes: SL Yesterday, however, I was able to successfully authenticate via SL Kerberos from VMware ESX Server 2.5.3 (the console operating SL system is Linux-based)

Re: keytab - MIT Keytab Binary File Format Encoder / Decoder

2006-05-04 Thread Michael B Allen
On Wed, 03 May 2006 21:51:27 +0200 Love Hörnquist Åstrand [EMAIL PROTECTED] wrote: counted_octet_string { The principal part uses int32 lengths for the strings (int16 for num_components) while the keyblock uses int16 lengths. uint16_t length; uint8_t data[length];

Re: keytab - MIT Keytab Binary File Format Encoder / Decoder

2006-05-04 Thread Michael B Allen
Whoops, I forgot to update the part about the components array. I also ran ispell on it. http://www.ioplex.com/utilities/keytab.txt Mike Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Presence/absence of the keytab

2006-05-04 Thread Donn Cave
In article [EMAIL PROTECTED], Scott Lowe [EMAIL PROTECTED] wrote: On 2006-05-04 12:29:53 -0400, Donn Cave [EMAIL PROTECTED] said: True, though there is a sort of grey area inhabited by services that use Kerberos to perform password authentication. This is functionally like kinit, but

Re: Presence/absence of the keytab

2006-05-04 Thread Markus Moeller
BTW. You don't really need a keytab. Windows uses for example its own store and updates it regularly as part of the system trust key update. Markus Donn Cave [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] In article [EMAIL PROTECTED], Scott Lowe [EMAIL PROTECTED] wrote: On

Can Standard Kerberos and AD serve the same domain w/out conflict?

2006-05-04 Thread uidzero Bainter
We currently have an existing Active Directory domain for our windows network, and I would like to setup Kerberos on the Unix side to service those systems. (I would simply use windows as the KDC, but the username convention is firstnamespacelastname which is obviously inherently incompatible

MIT Kerberos - Freeware or Open Source

2006-05-04 Thread herbert . chan
Hi, I always thought that MIT Kerberos should be considered Open Source .. is this right? Or should it be considered Freeware? Please let me know what you think!!! Herbert --- This message (including any attachments) is

gss_acquire_cred returns error on machine with the name different from principal name

2006-05-04 Thread sergey . klyushin
Hello. Could you help with the following issue with MIT Kerberos libraries for Windows. 1. Principal for service/[EMAIL PROTECTED] was exported to keytab file. 2. Keytab file (krb5kt) placed in Windows directory on mymachine1.domain.com and mymachine2.domain.com 3. Application uses [EMAIL

Help Needed

2006-05-04 Thread Imran Rashid
Sir, We are the students in the computer engineering program of the University of Engineering and Technology, Taxila, Pakistan (www.uettaxila.edu.pk). We are currently researching session based authentication. For this purpose we have downloaded the free kerboros software provided by you.

Re: Presence/absence of the keytab

2006-05-04 Thread Scott Lowe
On 2006-05-04 12:29:53 -0400, Donn Cave [EMAIL PROTECTED] said: In article [EMAIL PROTECTED], Richard E. Silverman [EMAIL PROTECTED] wrote: SL == Scott Lowe [EMAIL PROTECTED] writes: SL Yesterday, however, I was able to successfully authenticate via SL Kerberos from VMware ESX Server

Re: Presence/absence of the keytab

2006-05-04 Thread Scott Lowe
On 2006-05-04 03:38:27 -0400, Richard E. Silverman [EMAIL PROTECTED] said: SL == Scott Lowe [EMAIL PROTECTED] writes: SL Yesterday, however, I was able to successfully authenticate via SL Kerberos from VMware ESX Server 2.5.3 (the console operating SL system is Linux-based)

Register for the AFS Kerberos Workshop

2006-05-04 Thread Esther Filderman
[again, sorry for the cross-posting. PLEASE feel free to forward this along and/or suggest other places this should be posted!] Registration is now open for the AFS Kerberos Workshop 2006, to be held June 12-16 on the campus of the University of Michigan, Ann Arbor. Once again we are

Re: gss_acquire_cred returns error on machine with the name different from principal name

2006-05-04 Thread Ken Raeburn
On May 3, 2006, at 15:47, [EMAIL PROTECTED] wrote: Hello. Could you help with the following issue with MIT Kerberos libraries for Windows. So, is the idea that you're going to keep posting this over and over again until someone answers? That gets kind of annoying, especially when

Re: Register for the AFS Kerberos Workshop

2006-05-04 Thread Jeffrey Altman
The web site is: http://www.pmw.org/afsbpw06/ Esther Filderman wrote: Registration is now open for the AFS Kerberos Workshop 2006, to be held June 12-16 on the campus of the University of Michigan, Ann Arbor. Once again we are offering two tutorials: - an introduction to OpenAFS its

Re: Presence/absence of the keytab

2006-05-04 Thread Luke Howard
BTW. You don't really need a keytab. Windows uses for example its own store and updates it regularly as part of the system trust key update. Right, but for all intents and purposes it's effectively the same thing. The only difference is that Windows stores a string from which the keys can be