Re: kprop: Software caused connection abort while reading response from server

2007-11-29 Thread Ken Raeburn
On Nov 27, 2007, at 5:25, Juri Dakua wrote: As in the above step, kpropd is not returned successfully, subsequent trial to create stash file and start the krb5kdc daemon at slave (Executing commands kdb5_util stash and /usr/local/sbin/krb5kdc) Returns the following error

Authentication Of Users !!

2007-11-29 Thread Jyotishmaan Ray
Hi All Kerberos Experts, This is Jyotishmaan. I have migrated users to LDAP server in Linux platform. When i tested for ssh logon, for a test user- ldapusr i got the following error as shown below:- [EMAIL PROTECTED] compcen]# ssh authdns.nits.ac.in -l ldapusr [EMAIL PROTECTED]'s password:

mac os x ticket cache

2007-11-29 Thread Ranga Samudrala
Hello, On a Mac OS X machine, is there a way to force the SSH client to use a Kerberos TGT from a cache on the file system instead of the default - in the memory? thanks Ranganath Samudrala [EMAIL PROTECTED] Office: 571-521-8659 I am not tired anymore.

Re: mac os x ticket cache

2007-11-29 Thread Christopher D. Clausen
Ranga Samudrala [EMAIL PROTECTED] wrote: On a Mac OS X machine, is there a way to force the SSH client to use a Kerberos TGT from a cache on the file system instead of the default - in the memory? Change what the KRB5CCNAME variable points to. CDC

Re: Authentication Of Users !!

2007-11-29 Thread Roberto C . Sánchez
On Thu, Nov 29, 2007 at 07:15:21AM -0800, Jyotishmaan Ray wrote: Hi All Kerberos Experts, This is Jyotishmaan. I have migrated users to LDAP server in Linux platform. When i tested for ssh logon, for a test user- ldapusr i got the following error as shown below:- [EMAIL PROTECTED]

Recommendations for Mixing Windows and non-Windows Domains?

2007-11-29 Thread Henry B. Hotz
If you run a Windows Domain and you also use BIND and MIT (or Heimdal) for DNS/Kerberos then you must have a strategy for preventing them from stepping on each other. Can I ask people for thumbnail's of how you-all do that? What raw services are handled by which servers? Are there magic

Re: Recommendations for Mixing Windows and non-Windows Domains?

2007-11-29 Thread Garrett Wollman
In article [EMAIL PROTECTED], Henry B. Hotz [EMAIL PROTECTED] wrote: Significant services (which may need duplication or conflict resolution between Unix and AD): In general, we (MIT CSAIL) pretty much ignore Windows DNS. The DCs run it, because AD requires it, but we don't consider it

Re: mac os x ticket cache

2007-11-29 Thread Ranga Samudrala
Well, When I set this environment variable and invoke ssh, it does not recognize the environment variable, instead, it prompts for password. If set the environment variable and run the kinit command, I see the error: kinit: Unable to make 'Initial default ccache' the new system default

Re: Authentication Of Users !!

2007-11-29 Thread Roberto C . Sánchez
Taking this back to the list. On Thu, Nov 29, 2007 at 08:46:42PM -0800, Jyotishmaan Ray wrote: The output of the command 'getent passwd|grep ldapusr :- [EMAIL PROTECTED] ~]# getent passwd|grep ldapusr ldapusr:*:625:625:ldapusr:/home/ldapusr:/bin/bash [EMAIL PROTECTED] ~]# Well, the