[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: more q's on multiple salted keys kaserver and afs




Well, I set up my NT box and rolled in Tramsarc NT client version 3.6 but was
unable to get tickets even after applying the patch which started this thread.
I set up my default_keys with v5 v4 and afs3-salt:<my cell> and made a new 
principal for myself and verified using get --long that it did indeed receive
a set of afs3-salted keys.

This is the situation:

1. Tramsarc klog from a unix-box doesn't work (password incorrect). Don't know
   why yet and it doesn't matter much since I use kauth instead. Tramsarc 
   klog.krb also does not work by the way ...

2. The arla (arla-pre34) klog (and of course heimdal/kth-krb kauth) works!

3. Transarc NT klog does not work. Getting password incorrect there aswell.
   After inserting some extra fprintfs in kdc/connect.c I was able to find
   that transarc klog/unix does indeed produce something which is sent to 
   do_kaserver in kdc/kaserver.c but the NT client produces something which 
   is interpreted as a V4 request by kdc/connect.c:process_request ! Is it 
   just me or is that very confusing?

I also dug around some in the NT client headerfiles and it seems like the
pioctl is the same so it should in principle be possible to probe for the 
transarc dll's and headerfiles and just call this pioctl from k_pioctl but
I guess that would be less than optimal since it depends on the transarc
libraries in this case...

	Cheers Leif

-----------------------------------------------------------------
Leif Johansson				Phone: +46 8 164541		
IT- and media services
Stockholm University 			email: leifj@it.su.se 	

<This space is left blank for quotational and disclamatory purposes.>