OpenBSD and Kerberos Client

2007-06-05 Thread David.Rogal
Hello all, I'm having a problem setting up kerberos on an OpenBSD system. Please advise as you can. Thanks! -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LEGEND (names changed for security) -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- kdc = linux box, kdc and kerberos admin server krbc1 = krb5 client

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Janne Johansson
[EMAIL PROTECTED] wrote: Hello all, I'm having a problem setting up kerberos on an OpenBSD system. Please advise as you can. ...8... I then tried kadmin on krbc2, which doesn't work. It doesn't even bother with trying to get to the admin server. It just gives me a prompt 'kadmin'. Perhaps

Re: OpenBSD and Kerberos Client

2007-06-05 Thread viq
On 05/06/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hello all, I'm having a problem setting up kerberos on an OpenBSD system. Please advise as you can. Thanks! In my research about Kerberos I encountered statements that Heimdal (what is in OpenBSD) and MIT (what seems to be the most

Re: OpenBSD and Kerberos Client

2007-06-05 Thread David.Rogal
-Original Message- From: Janne Johansson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 05, 2007 11:09 AM To: David Rogal Cc: misc@openbsd.org Subject: Re: OpenBSD and Kerberos Client [EMAIL PROTECTED] wrote: Hello all, I'm having a problem setting up kerberos on an OpenBSD system

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Jacob Yocom-Piatt
[EMAIL PROTECTED] wrote: I've also found some people complaining that keytabs created on a different server than the one in which they are meant for do not work very well. If I can't use Heimdal's kadmin to create the keytab and I can't use one created remotely, then I simply can't use

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Janne Johansson
[EMAIL PROTECTED] wrote: -Original Message- From: Janne Johansson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 05, 2007 11:09 AM To: David Rogal Cc: misc@openbsd.org Subject: Re: OpenBSD and Kerberos Client [EMAIL PROTECTED] wrote: Hello all, I'm having a problem setting up kerberos

Re: OpenBSD and Kerberos Client

2007-06-05 Thread David.Rogal
[mailto:[EMAIL PROTECTED] Sent: Tuesday, June 05, 2007 12:53 PM To: David Rogal Cc: misc@openbsd.org Subject: Re: OpenBSD and Kerberos Client Might I suggest you try this from the OBSD box: /usr/sbin/ktutil -k /etc/kerberosV/krb5.keytab get \ -p myname/[EMAIL PROTECTED] host/[EMAIL PROTECTED

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Janne Johansson
[EMAIL PROTECTED] wrote: Might I suggest you try this from the OBSD box: /usr/sbin/ktutil -k /etc/kerberosV/krb5.keytab get \ -p myname/[EMAIL PROTECTED] host/[EMAIL PROTECTED] Same problem, it just hangs. Please note that kinit / klist work just fine. Kadmin and ktutil both hang. Looks like

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Diana Eichert
Signal to Noise ratio high in your last post. You think you trim some of the fat from your e-mails in your future posts? In your last e-mail you had a 4 line replay and 30 lines telling me how to locate you, get in touch with you via snail mail, tele, FAX and e-mail. Also, it was apparent the

Re: OpenBSD and Kerberos Client

2007-06-05 Thread David.Rogal
-Original Message- From: Janne Johansson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 05, 2007 1:56 PM To: David Rogal Cc: misc@openbsd.org Subject: Re: OpenBSD and Kerberos Client [EMAIL PROTECTED] wrote: Might I suggest you try this from the OBSD box: /usr/sbin/ktutil -k /etc

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Antoine Jacoutot
On Tuesday 05 June 2007 14:59:07 [EMAIL PROTECTED] wrote: Any chance you could help write up some documentation? Kerberos on OpenBSD doesn't really have any good docs that I could find. Maybe I could then retry this effort in the future. For expediency though, I will have to reinstall with

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Will Maier
On Tue, Jun 05, 2007 at 01:59:07PM +0100, [EMAIL PROTECTED] wrote: Any chance you could help write up some documentation? Kerberos on OpenBSD doesn't really have any good docs that I could find. Maybe I could then retry this effort in the future. For expediency though, I will have to reinstall

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Jacob Yocom-Piatt
[EMAIL PROTECTED] wrote: Perhaps, but I think you will have to take it on the heimdal lists, I'm fairly sure it does interoprate with various kinds of krb5 implementations, not just the MIT one. We make the AD hang of our heimdal servers here, so if heimdal can talk to Bill-kerberos, it should

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Vijay Sankar
On Tuesday 05 June 2007 07:59, [EMAIL PROTECTED] wrote: Any chance you could help write up some documentation? Kerberos on OpenBSD doesn't really have any good docs that I could find. Maybe I could then retry this effort in the future. For expediency though, I will have to reinstall with

Re: OpenBSD and Kerberos Client

2007-06-05 Thread viq
On 05/06/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I've also found some people complaining that keytabs created on a different server than the one in which they are meant for do not work very well. In my small amount of testing/playing with it I had a keytab generated on FreeBSD server

Re: OpenBSD and Kerberos Client

2007-06-05 Thread demuel
This must be another troll wandering in the Docklands area. Signal to Noise ratio high in your last post. You think you trim some of the fat from your e-mails in your future posts? In your last e-mail you had a 4 line replay and 30 lines telling me how to locate you, get in touch with you

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Stuart Henderson
[EMAIL PROTECTED] wrote: please consider the environment before printing this e-mail. aha, that's why we can only get an 8A feed at Harbour Exchange, the power is used up for .sig transmission (-:

Re: OpenBSD and Kerberos Client

2007-06-05 Thread David.Rogal
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Diana Eichert Sent: Tuesday, June 05, 2007 1:55 PM To: misc@openbsd.org Subject: Re: OpenBSD and Kerberos Client Signal to Noise ratio high in your last post. You think you trim some of the fat from your

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Will Maier
On Tue, Jun 05, 2007 at 03:16:06PM +0100, [EMAIL PROTECTED] wrote: I don't have the audacity to do anything. The email signature is defined through company policy and tacked on by the M$ Exchange Server on the way out. I have no say and only see it when I get replies to my email. Have you

Re: OpenBSD and Kerberos Client

2007-06-05 Thread demuel
Maybe he is trying to impress anyone, specially UK-based openbsd misc subscribers, in a meditative way possible that he works for a company in the Docklands? Saying that configuring this is better and easier than Redhat Linux has no place in the OpenBSD mailing lists. On Tue, Jun 05, 2007 at

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Diana Eichert
On Tue, 5 Jun 2007, [EMAIL PROTECTED] wrote: I don't have the audacity to do anything. The email signature is defined through company policy and tacked on by the M$ Exchange Server on the way out. I have no say and only see it when I get replies to my email. But, I'm glad that you appreciate

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Lars Hansson
[EMAIL PROTECTED] wrote: I don't have the audacity to do anything. The email signature is defined through company policy and tacked on by the M$ Exchange Server on the way out. I have no say and only see it when I get replies to my email. If your company insists on such stupid policies you

Re: OpenBSD and Kerberos Client

2007-06-05 Thread Peter N. M. Hansteen
Diana Eichert [EMAIL PROTECTED] writes: Another poster had a suggestion you might take to heart, get a free e-mail account somewhere which you can control. It's actually a great suggestion, I second that. Not only do you then get to speak as *yourself*, if you set things up right you also