Re: Decrypting a kerberos session

2005-07-11 Thread Mukul Gandhi
Hi Lyle, I guess the following information will be helpful to you.. http://www.hsc.fr/ressources/presentations/ad_proto_traffic/win_net_proto_trafic_en.html Regards, Mukul --- [EMAIL PROTECTED] wrote: Hi, I wish to intercept traffic from the client to a server and decrypt it. The

Re: Assertion failuers

2005-07-11 Thread fariba
thank you. may be i should explain what o really want to know: why by disabling the threads our problem on 2.6 went away? why using these flags was suggested? is multi-threading support kind of buggy? Sam Hartman wrote: fariba == fariba [EMAIL PROTECTED] writes: fariba i

Re: Assertion failuers

2005-07-11 Thread Ken Raeburn
On Jul 11, 2005, at 04:59, fariba wrote: thank you. may be i should explain what o really want to know: why by disabling the threads our problem on 2.6 went away? why using these flags was suggested? is multi-threading support kind of buggy? There have been problems on some systems in

Re: Need some tips on kerberizing our ENTIRE network

2005-07-11 Thread Wyllys Ingersoll
Fred Dushin wrote: A big part of the problem is HTTP (big surprise -- yet another protocol that is being used for purposes for which it was not designed). Yes, IIS supports GSS authentication via SPNEGO, but I have not been able to decipher whether data protection is offered; anecdotal

Re: Assertion failuers

2005-07-11 Thread Phil Dibowitz
On Sun, Jul 10, 2005 at 03:53:40PM -0400, Sam Hartman wrote: fariba == fariba [EMAIL PROTECTED] writes: fariba i work with phil as well. i was wondering what are the fariba proc/con of using these flags: fariba --disable-shared --enable-static --disable-threads It turns

Re: Assertion failuers

2005-07-11 Thread fariba
i relinked our other application(mureqd) with the new 2.6 (thread disabled) and released it, to see if the process functions better now. Phil Dibowitz wrote: On Sun, Jul 10, 2005 at 03:53:40PM -0400, Sam Hartman wrote: fariba == fariba [EMAIL PROTECTED] writes: fariba

krb5-1.4.1 build failure on FreeBSD 5.4 (EAI_NODATA), and a workaround

2005-07-11 Thread Fred Dushin
I'm getting a krb5-1.4.1 build failure on FreeBSD 5.4-RELEASE: .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c: In function `krb5int_translate_gai_error': .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c:370: error: `EAI_NODATA' undeclared (first use in this function)

Re: krb5-1.4.1 build failure on FreeBSD 5.4 (EAI_NODATA), and a workaround

2005-07-11 Thread Russ Allbery
Fred Dushin [EMAIL PROTECTED] writes: I'm getting a krb5-1.4.1 build failure on FreeBSD 5.4-RELEASE: .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c: In function `krb5int_translate_gai_error': .../krb5-1.4.1/src/lib/krb5/os/hst_realm.c:370: error: `EAI_NODATA' undeclared (first use in this

Windows SSH client that uses tickets not obtained from AD login

2005-07-11 Thread jay alvarez
Hi, Do you know any windows ssh client that can use gssapi authentication and not using SSPI(used by vintela and CSS putty versions)wherein it uses tickets that were obtained from an Active Directory login? I have downloaded KFW from MIT and I have successfully obtain tickets using Leash. I tried

Re: Windows SSH client that uses tickets not obtained from AD login

2005-07-11 Thread Jeffrey Altman
Kermit 95 http://www.kermit-project.org/k95.html provides support for SSH with GSS and it derives its tickets from KFW. The version distributed by Columbia University is old and not quite up to date but it works. jay alvarez wrote: Hi, Do you know any windows ssh client that can use gssapi