[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

mixing heimdal an MIT kerberos V



I'm running a heimdal version 0.5.1 as a kdc. Can I support solaris 
clients running Sun implementation of MIT kerberos ? According to 
Sun it's compatible with MIT 1.2.5.
Clients such as kinit works but listing keytab files with solaris version of 
ktutil made by heimdal doesn't work. Neither does solaris pam_krb5 module 
work with heimdal keytab files.

# /usr/bin/ktutil 
ktutil:  rkt krb5.keytab
ktutil:  list
slot KVNO Principal
---- ---- --------------------------------------------------------------------------
   1    1             host/aries.netia.se@NETIA.SE
   2    1             host/aries.netia.se@NETIA.SE
   3    1             host/aries.netia.se@NETIA.SE
   4    1             host/aries.netia.se@NETIA.SE

# /usr/heimdal/sbin/ktutil list
FILE:/etc/krb5.keytab:

Vno  Type           Principal                   
  1  des-cbc-crc    host/aries.netia.se@NETIA.SE
  1  des-cbc-md4    host/aries.netia.se@NETIA.SE
  1  des-cbc-md5    host/aries.netia.se@NETIA.SE
  1  des3-cbc-sha1  host/aries.netia.se@NETIA.SE

krb4:/etc/srvtab:

Vno  Type         Principal                   
  1  des-cbc-md5  host/aries.netia.se@NETIA.SE
  1  des-cbc-md4  host/aries.netia.se@NETIA.SE
  1  des-cbc-crc  host/aries.netia.se@NETIA.SE