Re: MIT krb5 has no site support.

2006-09-01 Thread Jeremy Allison
On Thu, 31 Aug 2006 12:22:47 -0700, Donn Cave wrote: Custom krb5.conf isn't very elegant, but apart from that, would you agree that this fits in the general area of configuration data from alternate sources? I mean, it seems like it would be better to use the existing configurable library

Re: Is there a list of characters allowed to define a principal name and realm?

2006-06-27 Thread Jeremy Allison
On Tue, 27 Jun 2006 18:38:47 -0400, Ken Raeburn wrote: For portability, I think the right answer is if you use anything outside of US-ASCII minus control characters, you're likely to hurt yourself or your users, and RFC 4120's specifications and recommendations are based on that. We intend

Re: Generic unknown RC/IO error while verifying initial ticket

2004-11-30 Thread Jeremy Allison
Sam Hartman wrote: login.krb5 is trying to write out the replay cache. Possibly, you compiled login.krb5 on a system with /var/tmp but then ran it on a system without that directory or something like that. You can use strace, truss or your appropriate os-specific tool to see what filename

Re: samba keytab support for AD and kinit -k

2004-11-29 Thread Jeremy Allison
On Sun, Nov 28, 2004 at 07:44:58PM -0500, Sam Hartman wrote: Samba's handling of short names and Kerberos principals seems different than the Microsoft tools and tends to work much less of the time. IT would be great to see it more consistent with the Windows domain join procedure. I added

Re: Fix for memory leak in krb5 1.3.5

2004-11-04 Thread Jeremy Allison
Jeffrey Altman wrote: Jeremy: You don't want my attention. If you have patches or bugs you would like to submit the proper place to do so is by sending mail to [EMAIL PROTECTED] Forwarded it - thanks ! Jeremy. Kerberos mailing list

Re: Fix for memory leak in krb5 1.3.5

2004-11-04 Thread Jeremy Allison
Jeffrey Altman wrote: I'm not sure why it was not pulled into the 1.3 tree but this problem does not exist in the cvs-head. Hmmm. Now I have your attention, is there any chance of the following patch being accepted for the next release ? I compile Samba with maximum warnings and the use of

Re: MIT support for site specific SRV records

2004-03-02 Thread Jeremy Allison
Team answered this question long ago, our reason is to serve our users - pure compliance comes second. Jeremy Allison, Samba Team. Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

Re: malloc hang inside krb5_sendto_kdc

2004-02-04 Thread Jeremy Allison
the condition. Will do that today. If this is on an x86 Linux box I would recommend running under valgrind to try and track this down. In fact I would hope the Kerberos developers are already using this. It's a wonderful way of finding and fixing bugs (we use it a *lot*). Cheers, Jeremy Allison

Re: Kerberos on the web

2002-01-19 Thread Jeremy Allison
impact on your new device ? Are you or I being naive here Regards, Jeremy Allison, Samba Team.