search for: srvtab

...rmission denied" after entering the password. The server (in debug mode) at this point says: debug1: attempt 2 failures 2 kerberos-iv/udp unknown service, using default port 750 Kerberos v4 TGT for joeuser unverifiable: Principal unknown (kerberos); rcmd.grimble not registered, or srvtab is wrong? debug1: krb4_cleanup_proc called Failed password for joeuser from 123.45.67.89 port 34375 ssh2 Snooping the network reveals that client machine 'grimble' sends a packet that includes the kerberos realm and "rcmd.grimble' to 'kerberos', our auth server. Se...

...The programs compile fine and token passing is without problems. Unfortunately it is not possible to login without a valid token (`Permission denied.'). There is following message in the syslog: Kerberos v4 TGT for ... unverifiable: Principal unknown (kerberos); rcmd.wsc33 not registered, or srvtab is wrong? Failed password for ... from ... If i use an old ssh-1.2.27 with the patch from Dug Song (many thanks) and security fixes i have no problems: Kerberos V4 TGT for ... unverifiable: Principal unknown (kerberos); rcmd.wsc33 not registered, or srvtab is wrong? Password authentication for...

...lt sshd without PAM in order to verify that PAM destroys the tokens but I've not enough time to analyse the code in more details. I guess # ifdef USE_PAM do_pam_setcred(0); # endif /* USE_PAM */ in session.c is the culprit. By the way, I've had to disable privsep because otherwise /etc/srvtab cannot be read. I hope I've provided enough information. Thanks in advance, Gintas

When "use kerberos keytab = yes" in smb.conf is set with samba-3.2.8 and the environment variable KRB5_KTNAME is not set with the value using prefix "FILE:" or the default_keytab in /etc/krb5.conf is set without the prefix i.e. default_keytab_name = /etc/v5srvtab then the function smb_krb5_open_keytab() returns KRB5_KT_UNKNOWN_TYPE. If smb_krb5_open_keytab with a filename "/etc/v5srvtab" it would work fine, however if the "default" keytab is used the expectation is that it must have a prefix "FILE:" or "WRFILE:"....

...ation such as expiration dates, but I don't see this information. freebsd# klist Ticket file: /tmp/tkt0 klist: No ticket file (tf_util) freebsd# ktutil list FILE:/etc/krb5.keytab: Vno Type Principal 0 des-cbc-md5 host/freebsd.template.state.company.com@DOMAIN.LOCAL krb4:/etc/srvtab: Vno Type Principal When I try to authenticate with the kinit command I get an error: freebsd# kinit administrator@DOMAIN.LOCAL FreeBSD Inc. (freebsd.template.state.company.com) Kerberos Initialization for "administrator@DOMAIN.LOCAL" Password: kinit: Retry count exceeded (send_to_kd...

comments? -------------- next part -------------- An embedded message was scrubbed... From: Charles Clancy <mgrtcc at cs.rose-hulman.edu> Subject: Problems on Sparcs Date: Wed, 6 Dec 2000 09:55:41 -0500 (EST) Size: 2913 Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20001206/c7cb5d2a/attachment.mht

...sshd.8] disable kerberos authentication by default - provos at cvs.openbsd.org 2000/08/02 11:27:05 [sshd.8 readconf.c auth-krb4.c] disallow kerberos authentication if we can't verify the TGT; from dugsong@ kerberos authentication is on by default only if you have a srvtab. - markus at cvs.openbsd.org 2000/08/04 14:30:07 [auth.c] unused - markus at cvs.openbsd.org 2000/08/04 14:30:35 [sshd_config] MaxStartups - markus at cvs.openbsd.org 2000/08/15 13:20:46 [authfd.c] cleanup; ok niels@ - markus at cvs.openbsd.org 2000/08/...