Re: Credentials Cache File Problem Running with 'cron'

2008-12-05 Thread Alexandra Ellwood
the environment variable KRB5CCNAME to specify a FILE credentials cache format and storing your tickets in that (eg: KRB5CCNAME=FILE:/tmp/tickets). Using the same FILE ccache from your perl script should work. --lxs Alexandra Ellwood [EMAIL PROTECTED] MIT Information Services Technology

Re: kinit under launchd on Mac OS X 10.5

2008-01-15 Thread Alexandra Ellwood
/mailman/listinfo/kerberos --lxs Alexandra Ellwood [EMAIL PROTECTED] MIT Kerberos Development Team http://mit.edu/lxs/www Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Problem installing Kerberos

2006-11-06 Thread Alexandra Ellwood
) * A symlink from /System/Library/CoreServices/Kerberos to / Applications/Utilities/Kerberos * Kerberos CFM shim libraries for older applications that use Kerberos Hope this helps, --lxs Alexandra Ellwood [EMAIL PROTECTED] MIT Kerberos Development Team http://mit.edu/lxs/www

Re: sshd, Tiger and KRB5CCNAME

2006-08-29 Thread Alexandra Ellwood
On Aug 29, 2006, at 10:13 AM, Simon Wilkinson wrote: On 25 Aug 2006, at 19:58, Alexandra Ellwood wrote: Is the CCAPI patch even in what went out in the Tiger security update? AFAICT, it's not, so perhaps the machines where it isn't working have taken the update and the others have

Re: trying to delete from osx

2006-08-15 Thread Alexandra Ellwood
and figure out which application is running when the dialog appears. While the dialog is up the application that requested it will be blocked and will have the spinning rainbow cursor so you can wait until it happens and then look at your running applications. --lxs Alexandra Ellwood [EMAIL

Re: Thoughts on long-lived credentials

2006-01-19 Thread Alexandra Ellwood
adding support for it. As is typical on the Mac, the Remember in Keychain checkbox will not be checked by default. And we will almost certainly add some config file way to turn off the support entirely for sites with more stringent security policies. HTH, --lxs Alexandra Ellwood [EMAIL

Re: question

2005-08-31 Thread Alexandra Ellwood
in response to applications negotiate Kerberos. Note that some applications may still programmatically generate the dialog even if you have no Kerberos configuration (hence my recommendation to turn off Kerberos support in your AFP server). Hope this helps, --lxs Alexandra Ellwood [EMAIL

Re: kdcpreauth.c and Kerberos for the Macintosh

2005-08-05 Thread Alexandra Ellwood
Kerberos.app), please let me know. --lxs Alexandra Ellwood [EMAIL PROTECTED] MIT Kerberos Development Team http://mit.edu/lxs/www Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Building Krb5 1.3.6 on Mac OS X

2005-01-22 Thread Alexandra Ellwood
to grab a current snapshot of Heimdal and see if it just works. On Jan 21, 2005, at 14:52, Alexandra Ellwood wrote: To build stock krb5 on Mac OS X, try building with LDFLAGS=-Wl,-search_paths_first as an option to configure. See http://mailman.mit.edu/pipermail/krbdev/2003/001714.html for more

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Alexandra Ellwood
--- Alexandra Ellwood [EMAIL PROTECTED] MIT Information Services Technology http://mit.edu/lxs/www/ --- Kerberos

Re: How to Force a Kerb 4 Request

2004-11-30 Thread Alexandra Ellwood
--- Alexandra Ellwood [EMAIL PROTECTED] Kerberos Development Team MIT Information Services Technology http://mit.edu/lxs/www --- Kerberos

Re: How to Force a Kerb 4 Request

2004-11-27 Thread Alexandra Ellwood
Mac OS X's kinit does not support the -4 option because it is incompatible with the way the Kerberos Login Library manipulates tickets. In particular, the KLL defines the concept of a valid ticket cache as one which contains valid TGTs for all versions of Kerberos defined by the machine's

Re: login pop up

2004-09-07 Thread Alexandra Ellwood
spontaneously, what applications are you running when the dialog appears? Thanks, --lxs --- Alexandra Ellwood [EMAIL PROTECTED] Kerberos Development Team MIT Information Services Technology http://mit.edu/lxs/www

Re: using multiple credential cache files in a server

2004-05-06 Thread Alexandra Ellwood
://mailman.mit.edu/mailman/listinfo/kerberos --lxs --- Alexandra Ellwood [EMAIL PROTECTED] MIT Information Services Technology http://mit.edu/lxs/www

Re: Disable Mac OS X Kerberos Auto Prompting

2004-04-12 Thread Alexandra Ellwood
in one particular application. Thanks, Christopher Nebergall Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos --lxs --- Alexandra

Re: problem with the kinit_prompter in kfw 2.5

2004-02-16 Thread Alexandra Ellwood
(the one based on krb5-1.3.2). You can download a beta of kfw-2.6 to make sure it's fixed: http://web.mit.edu/kerberos/www/dist/testing.html#kfw-2.6 Hope this helps, -- --lxs - Alexandra Ellwood

Re: Error compiling kerberos lib in OSX 10.3.1

2004-01-16 Thread Alexandra Ellwood
/mailman/listinfo/kerberos Hope this helps, --lxs -- - Alexandra Ellwood [EMAIL PROTECTED] MIT Information Systems http://mit.edu/lxs/www

re: kerberos 1.3.1 compile failure on Mac OS X Server 10.2.6

2003-10-07 Thread Alexandra Ellwood
-- - Alexandra Ellwood [EMAIL PROTECTED] MIT Information Systems http://mit.edu/lxs/www

Re: kerberos 1.3.1 compile failure on Mac OS X Server 10.2.6

2003-08-14 Thread Alexandra Ellwood
-- - Alexandra Ellwood [EMAIL PROTECTED] MIT Information Systems http://mit.edu/lxs/www

Re: multiple gss_init_sec_context within a process

2003-02-05 Thread Alexandra Ellwood
-- - Alexandra Ellwood [EMAIL PROTECTED] MIT Information Systems http://mit.edu/lxs/www

Re: Native Mac OSX Kerberos clients and SecurID

2002-10-11 Thread Alexandra Ellwood
-- - Alexandra Ellwood [EMAIL PROTECTED] MIT Information Systems http://mit.edu/lxs/www