From prospero@psn.net Thu Feb 24 12:20:27 2000 Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.mit.edu (8.9.3/8.9.3) with SMTP id MAA27609 for ; Thu, 24 Feb 2000 12:20:26 -0500 (EST) Received: from pluto.psn.net by MIT.EDU with SMTP id AA26122; Thu, 24 Feb 00 12:20:16 EST Received: from nas-32-207.chicago.navinet.net ([216.67.32.207]) by pluto.psn.net with esmtp (PSN Internet Service 3.12 #1) for krb5-bugs@MIT.EDU id 12O1w8-0005Ba-00; Thu, 24 Feb 2000 10:20:24 -0700 Message-Id: Date: Thu, 24 Feb 2000 11:20:17 -0600 From: ray To: krb5-bugs@MIT.EDU Subject: kerberos problems with Mac OS9 >Number: 828 >Category: krb5-misc >Synopsis: kerberos problems with Mac OS9 >Confidential: yes >Severity: serious >Priority: medium >Responsible: meeroh >State: closed >Class: sw-bug >Submitter-Id: unknown >Arrival-Date: Thu Feb 24 12:21:01 EST 2000 >Last-Modified: Mon Feb 28 17:00:39 EST 2000 >Originator: Raymond Black >Organization: University of Chicago >Release: >Environment: >Description: Greetings, I have a Mac G4 running OS9 and am having problems with my Kerberos. 1. When starting up almost half the time I receive an error message "k5 client unimplimented trap, restart with extensions off 2. For reasons unknown, the login authentication does not recognize my login or password without reinstalling os 9 and the connectivity package (i.e., reinstalling kerbos). If it helps, I obtained Kerberos from the U of Chicago connectivity package 6.0. Thank you for your assistance. o/ Raymond Black /| English - University of Chicago / > rblack@uchicago.edu / prospero@africana.com Too much of a good thing is wonderful - Mae West >How-To-Repeat: >Fix: >Audit-Trail: Responsible-Changed-From-To: gnats-admin->meeroh Responsible-Changed-By: raeburn Responsible-Changed-When: Thu Feb 24 19:10:55 2000 Responsible-Changed-Why: Sounds like a Mac problem. *But*, it could be a problem with UChicago's internal distribution, depending whether they've made any changes.... State-Changed-From-To: open-analyzed State-Changed-By: meeroh State-Changed-When: Fri Feb 25 19:16:02 2000 State-Changed-Why: K5 client is not ours, that's a bizarre NRL concoction which returns k5 tickets when k4 tickets are asked for. It makes Eudora with v4 support work against the bogus v5 KPOP server, and that's about it. This is a problem with both - the fact that UChicago is distribution that to people and - the fact that k5 client is crashing but neither of those are our problem. I will respond to the guy after I talk mjv. State-Changed-From-To: analyzed-closed State-Changed-By: meeroh State-Changed-When: Mon Feb 28 16:59:03 2000 State-Changed-Why: mjv send email, as quoted below. Date: Mon, 28 Feb 2000 16:46:49 -0500 To: Raymond Black From: Marshall Vale Subject: Kerberos bug submission Raymond, Greetings, I have a Mac G4 running OS9 and am having problems with my Kerberos. 1. When starting up almost half the time I receive an error message "k5 client unimplimented trap, restart with extensions off 2. For reasons unknown, the login authentication does not recognize my login or password without reinstalling os 9 and the connectivity package (i.e., reinstalling kerbos). If it helps, I obtained Kerberos from the U of Chicago connectivity package 6.0. From the description in your message and from reading a support web page at UChicago, it looks like you are running "K5Client". Unfortunately "K5Client" is an awful hack written by another site that is neither supported nor encouraged to be used by the Kerberos development team. The real KClient is a Kerberos v4 only implementation and the real Kerberos v5 for the Macintosh does not have any connection to KClient. K5Client is a mutant version of KClient that has been modified to acquire and send Kerberos v5 tickets in order to support Eudora and Telnet applications in Kerberos v5 only sites. These normally Kerberos v4 based applications can be supported with this modification because they have a very narrow use of the KClient API. Other applications which use KClient will not function with this K5Client nor will applications that natively support Kerberos v5. I'm sorry that UChicago has decided to rely on this software. The MIT Kerberos team can offer you no support. As development continues on Kerberos for Macintosh (which includes the real KClient and Kerberos v5 implementations for Mac OS), K5Client is less likely to continue functioning. Many applications are going to be updated over the next year to take advantage of the new Apple operating system and the new Kerberos releases. K5Client is probably not going to make that transition well (nor should it). The only thing I can offer is that you contact your UChicago computing support organization for further help with this particular product. Marshall -- Marshall Vale | mjv@mit.edu | Information Systems | "Knusprig Mac Dev Team Lead | Massachusetts Institute of Technology | und Lecker" >Unformatted: