Re: kadmin problem

2007-02-20 Thread scotty adams
Hi Marcus, When i use modprinc -requires_preauth Then try to kinit user it prompts incorrect password then i should change the password so that it works, but i guess upon changing the password the princ is being modified again... thus i guess that the -requires_preauth isnt set anymore...

Re: kadmin problem

2007-02-20 Thread Marcus Watts
Hi Marcus, When i use modprinc -requires_preauth Then try to kinit user it prompts incorrect password then i should change the password so that it works, but i guess upon changing the password the princ is being modified again... thus i guess that the -requires_preauth isnt set

Re: kadmin problem

2007-02-20 Thread scotty adams
Hi marcus, My getprinc for HTTP/[EMAIL PROTECTED] kadmin.local: getprinc HTTP/[EMAIL PROTECTED] Principal: HTTP/[EMAIL PROTECTED] Expiration date: [never] Last password change: Sun Feb 18 10:00:03 GMT 2007 Password expiration date: [none] Maximum ticket life: 24855 days 03:14:07 Maximum

Re: KfW 3.1: Re-directed stderr of kinit/klist displays dialog

2007-02-20 Thread Jeffrey Altman
[EMAIL PROTECTED] wrote: Is there a way to redirect stderr from kinit/klist to a file? stdin and stderr cannot be redirected. they are used for password prompting Jeffrey Altman Secure Endpoints Inc. smime.p7s Description: S/MIME Cryptographic Signature

Re: kadmin problem

2007-02-20 Thread Dan Hyde
Hi marcus, My getprinc for HTTP/[EMAIL PROTECTED] kadmin.local: getprinc HTTP/[EMAIL PROTECTED] Principal: HTTP/[EMAIL PROTECTED] Expiration date: [never] Last password change: Sun Feb 18 10:00:03 GMT 2007 Password expiration date: [none] Maximum ticket life: 24855 days 03:14:07

Re: kadmin problem

2007-02-20 Thread Marcus Watts
Scotty Dan wrote: ... Hi marcus, My getprinc for HTTP/[EMAIL PROTECTED] kadmin.local: getprinc HTTP/[EMAIL PROTECTED] Principal: HTTP/[EMAIL PROTECTED] Expiration date: [never] Last password change: Sun Feb 18 10:00:03 GMT 2007 Password expiration date: [none] Maximum

krb5_sendto_kdc fails in some threaded applications

2007-02-20 Thread Simon Wilkinson
I've been doing some further work on Kerberos integration in assorted applications, and I'm seeing some problems with the Gaim 2.0.0 betas and Kerberos 1.5. It would appear that something in Gaim's threading is causing the select in the middle of krb5_sendto_kdc to return EINTR, which is

Re: KfW 3.1: Re-directed stderr of kinit/klist displays dialog

2007-02-20 Thread petesea
On Tue, 20 Feb 2007, Jeffrey Altman wrote: [EMAIL PROTECTED] wrote: Is there a way to redirect stderr from kinit/klist to a file? stdin and stderr cannot be redirected. they are used for password prompting Hmmm but I'm not trying to redirect the password prompt... in fact, kinit

Re: KfW 3.1: Re-directed stderr of kinit/klist displays dialog

2007-02-20 Thread Christopher D. Clausen
[EMAIL PROTECTED] wrote: On Tue, 20 Feb 2007, Jeffrey Altman wrote: [EMAIL PROTECTED] wrote: Is there a way to redirect stderr from kinit/klist to a file? stdin and stderr cannot be redirected. they are used for password prompting Hmmm but I'm not trying to redirect the password

Re: KfW 3.1: Re-directed stderr of kinit/klist displays dialog

2007-02-20 Thread Christopher D. Clausen
[EMAIL PROTECTED] wrote: On Tue, 20 Feb 2007, Jeffrey Altman wrote: [EMAIL PROTECTED] wrote: Is there a way to redirect stderr from kinit/klist to a file? stdin and stderr cannot be redirected. they are used for password prompting Hmmm but I'm not trying to redirect the password

Re: KfW 3.1: Re-directed stderr of kinit/klist displays dialog

2007-02-20 Thread Rodney M Dyer
At 10:24 PM 2/20/2007, Rodney M Dyer wrote: The MIT people simply don't want you to be able to pipe in a password to kinit via stdin, which is the right security practice (in security circles), however they are rather flippant about it, because they allow it under Unix. If they feel like