From gsin@abigail.mit.edu Wed Oct 7 16:47:22 1998 Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id QAA02286 for ; Wed, 7 Oct 1998 16:47:22 -0400 Received: from ABIGAIL.MIT.EDU by MIT.EDU with SMTP id AA18774; Wed, 7 Oct 98 16:47:08 EDT Received: (from gsin@localhost) by abigail.mit.edu (8.7.1/8.7.1) id QAA01228; Wed, 7 Oct 1998 16:47:12 -0400 (EDT) Message-Id: <199810072047.QAA01228@abigail.mit.edu> Date: Wed, 7 Oct 1998 16:47:12 -0400 (EDT) From: "Garrett H. Sin" Reply-To: gsin@abigail.mit.edu To: krb5-bugs@MIT.EDU Cc: gsin@MIT.EDU Subject: FTP error messages X-Send-Pr-Version: 3.99 >Number: 640 >Category: krb5-appl >Synopsis: GSSAPI errors on FTP to v5 host >Confidential: no >Severity: serious >Priority: high >Responsible: krb5-unassigned >State: closed >Class: support >Submitter-Id: unknown >Arrival-Date: Wed Oct 07 16:48:01 EDT 1998 >Last-Modified: Fri Sep 28 21:29:56 EDT 2001 >Originator: Garrett H. Sin >Organization: MIT >Release: krb5-1.0.5 >Environment: System: HP-UX abigail B.10.20 A 9000/782 2002244170 two-user license >Description: Abigail is both a v5 host and client. Upon ftping from abigail to abigail, I get GSSAPI errors indicating that abigail is not in the Kerberos database. However, it seems as though the authentication still suceeds! >How-To-Repeat: abigail 37: ftp abigail Connected to abigail.mit.edu. 220 abigail FTP server (Version 5.60) ready. 334 Using authentication type GSSAPI; ADAT must follow GSSAPI accepted as authentication type GSSAPI error major: Miscellaneous failure GSSAPI error minor: Server not found in Kerberos database GSSAPI error: initializing context GSSAPI authentication succeeded Name (abigail:gsin): >Fix: I assume from the next to last line, that things have somehow worked themselves out, but I don't understand the errors on the previous three lines. >Audit-Trail: From: Kev To: gsin@abigail.mit.edu Cc: krb5-bugs@MIT.EDU, gsin@MIT.EDU Subject: Re: krb5-appl/640: FTP error messages Date: Wed, 07 Oct 1998 21:03:12 EDT > >Description: > Abigail is both a v5 host and client. Upon ftping from > abigail to abigail, I get GSSAPI errors indicating that > abigail is not in the Kerberos database. However, it > seems as though the authentication still suceeds! What's happening is somewhat confusing; ftpd supports both the principals ftp/abigail.mit.edu@ATHENA.MIT.EDU AND host/abigail.mit.edu@ATHENA.MIT.EDU; The client goes looking in the Kerberos database first for ftp/* and then for host/* when it doesn't find the former...after generating the spurious error messages you see below. > >How-To-Repeat: > abigail 37: ftp abigail > Connected to abigail.mit.edu. > 220 abigail FTP server (Version 5.60) ready. > 334 Using authentication type GSSAPI; ADAT must follow > GSSAPI accepted as authentication type > GSSAPI error major: Miscellaneous failure > GSSAPI error minor: Server not found in Kerberos database > GSSAPI error: initializing context > GSSAPI authentication succeeded > Name (abigail:gsin): Hope this helps... -- Kevin L. Mitchell ------------------------- -. .---- --.. ..- -..- -------------------------- http://web.mit.edu/klmitch/www/ (PGP5 keys availiable from here) DSS Key ID ED0DB34E: D9BF 0E74 FDCB 43F5 C597 878F 9455 EC24 ED0D B34E DH Key ID 2A2C31D4: 1A77 4BA5 9E32 14AE 87DA 9FEC 7106 FC62 2A2C 31D4 State-Changed-From-To: open-closed State-Changed-By: tlyu State-Changed-When: Fri Sep 28 21:29:40 2001 State-Changed-Why: old support question >Unformatted: