RE: Kerby client library refactoring

2015-11-28 Thread Zheng, Kai
Ah, see your idea. Yes it looks nice and let consider it. Thanks! Regards, Kai -Original Message- From: Marc Boorshtein [mailto:mboorsht...@gmail.com] Sent: Sunday, November 29, 2015 9:50 AM To: kerby@directory.apache.org Subject: Re: Kerby client library refactoring Sorry, was working

RE: KDC is rejecting my TGS

2015-11-28 Thread Zheng, Kai
Yes Marc the fix is still pending there thinking you have a work around. It needs to take some time to sort it out. I'm currently focusing on ASN1/X509/CMS stuffs. Hopefully I could be back to it soon. Regards, Kai -Original Message- From: Marc Boorshtein [mailto:mboorsht...@gmail.com]

Re: Kerby client library refactoring

2015-11-28 Thread Marc Boorshtein
Sorry, was working on some other projects. My thought was instead of code that looks like this: requestOptions = new KOptions(); requestOptions.add(KrbOption.USE_TGT, tgt); //requestOptions.add(KrbOption.SERVER_PRINCIPAL, "HTTP/freeipa.rhelent.lan");

Re: KDC is rejecting my TGS

2015-11-28 Thread Marc Boorshtein
Just a heads up, I've pulled in the latest commits and I'm still able to get a Tgt, and I I can get a server principal back with a Tgt but the Sgt request still gets an error back of "bad integrity" with the following in the logs: Nov 28 20:45:57 freeipa.rhelent.lan krb5kdc[7507](info): TGS_REQ

Re: Kerby client library refactoring

2015-11-28 Thread Emmanuel Lécharny
Le 29/11/15 02:50, Marc Boorshtein a écrit : > Sorry, was working on some other projects. My thought was instead of code > that looks like this: > > requestOptions = new KOptions(); > requestOptions.add(KrbOption.USE_TGT, tgt); > //requestOptions.add(KrbOption.SERVER_PRINCIPAL, >