Subject: Problems with kerberos and andrew.
To: Advisor <advisor+@andrew.cmu.edu>
From: Christopher J Mason <cmason+@CMU.EDU>
List: port-mac68k
Date: 10/20/1996 02:12:26
I've just compiled an eBones kerberos 4 distribution, KTH-krb, for my
NetBSD/mac68k box. It config'ed and compiled perfectly, with no errors.
I can kinit to andrew and my tickets show up:
cmason@ros:/usr/athena/bin> klist
Ticket file: /tmp/tkt10
Principal: cjm@ANDREW.CMU.EDU
Issued Expires Principal
Oct 20 01:03:34 Oct 20 11:03:34 krbtgt.ANDREW.CMU.EDU@ANDREW.CMU.EDU
Oct 20 01:22:24 Oct 20 11:07:24 rcmd.unix17@ANDREW.CMU.EDU
(this was actually after the output below)
but whenever I try to ftp to sun4 I get:
cmason@ros:/usr/athena/bin> ./ftp sun4
Connected to unix14.ANDREW.cmu.edu.
220 unix14.andrew.cmu.edu FTP server (Version wu-2.4.2-cmu(1) Mon Aug 26
16:49:19 EDT 1996) ready.
Trying KERBEROS_V4...
535 ADAT: Kerberos V4 krb_rd_req: Can't decode authenticator (krb_rd_req)
Server didn't accept auth data.
*** Using plaintext user and password ***
Incidentally, the kerberized telnet just _hangs_ my machine. (I have a
(kernel) core if anyone wants it.)
Is there something I'm missing?? Is this an incompatibility in
software?? A known bug?? Shouldn't any working kerb4 implementation
work with andrew??
More information on KTH-krb is avaialable at http://www.pdc.kth.se/kth-krb/
TIA for any help any of you might be able to offer.
-c
PS, I just tried it again and got:
220 unix19.andrew.cmu.edu FTP server (Version wu-2.4.2-cmu(1) Mon Aug 26
16:49:19 EDT 1996) ready.
Trying KERBEROS_V4...
Error reading reply from server: Message integrity error (krb_rd_req).
*** Using plaintext user and password ***
Name (unix15.andrew:cmason): cjm
Message integrity error (krb_rd_req)
S:631
BA4AAAA1NTAyIEFsbCBjb21tYW5kcyBtdXN0IGJlIGVpdGhlciBNSUMgb3IgRU5DIHByb3RlY3
RlZC55gAJIN82WQcRuVVSVYfiteD8vsbt53oM7
ftp: Login failed.
Message integrity error (krb_rd_req)
...
but when I tried to ftp to ftp.andrew I got:
cmason@ros:/usr/athena/bin> ./ftp ftp.andrew
Connected to ftp.andrew.cmu.edu.
220 ftp.andrew.cmu.edu FTP server (Version wu-2.4.2-cmu(1) Mon Aug 26
16:50:31 EDT 1996) ready.
Trying KERBEROS_V4...
Kerberos login successful.
Name (ftp.andrew:cmason): cjm
S:333 Could not validate login permission for user cjm. Password required.
S:530 Login incorrect.
ftp: Login failed.
Remote system type is UNIX.
Using binary mode to transfer files.
Incidentally, ftp.andrew is a Decstation running ultrix, while
sun4.andrew is (are) Sun Sparc 4s running Solaris(??). (ftp.andrew also
doesn't accept non-anon logins, so the login failed is as expected).
_____________________________________________________________________
|Chris Mason - cmason@nyx.net cmason@cmu.edu http://ros.res.cmu.edu |
|"You can always count on a murderer for a fancy prose style."-Nabokov|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~