Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) X-RT-Original-Encoding: iso-8859-1 Content-Length: 5109 From JAR@FED.ORNL.GOV Mon Jan 6 14:54:29 1997 Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.69.0.28]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id OAA24992 for ; Mon, 6 Jan 1997 14:54:28 -0500 Received: from fed.ornl.gov by MIT.EDU with SMTP id AA21539; Mon, 6 Jan 97 14:54:26 EST Received: from FED.ORNL.GOV by FED.ORNL.GOV (PMDF V5.0-6 #12522) id <01IDWAHEYBXU8X91N0@FED.ORNL.GOV> for krb5-bugs@mit.edu; Mon, 06 Jan 1997 14:54:20 -0500 (EST) Message-Id: <01IDWAHEYCW48X91N0@FED.ORNL.GOV> Date: Mon, 06 Jan 1997 14:54:20 -0500 (EST) From: jar@ornl.gov Sender: "Jim Rome (423) 574-1306 E-mail: jar@ornl.gov" To: krb5-bugs@MIT.EDU Subject: K5 problems >Number: 334 >Category: krb5-misc >Synopsis: K5 problems >Confidential: no >Severity: non-critical >Priority: low >Responsible: tlyu >State: closed >Class: sw-bug >Submitter-Id: unknown >Arrival-Date: Mon Jan 06 14:55:01 EST 1997 >Last-Modified: Thu Feb 19 19:23:13 EST 1998 >Originator: >Organization: >Release: >Environment: >Description: 1) krb5-send-pr requires emacs which we don't like and don't have. 2) I was unsuccessful in getting k5 to make on AIX 4.1.x. I got /getttyent.c: relocation truncated to fit: 0x1a odm_free_list /lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc /getttyent.c: undefined reference to `odm_free_list' /lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc /getttyent.c: relocation truncated to fit: 0x1a odm_free_list /lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc /getttyent.c: undefined reference to `getattr' /lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc /getttyent.c: relocation truncated to fit: 0x1a getattr /lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib c/getttyent.c: undefined reference to `odm_free_list' /lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib c/getttyent.c: relocation truncated to fit: 0x1a odm_free_list /lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib c/getttyent.c: undefined reference to `odm_terminate' /lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib c/getttyent.c: relocation truncated to fit: 0x1a odm_terminate /usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: getttyent.o: loader reloc in read-only section .text /usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: final link failed: Invalid operation make: 1254-004 The error code from the last command is 1. 3) The new version seems to require that kdc.conf be in xx/var/krb5kdc, where xx is the default location. This is undocumented, and differs from beta7. 4) I have made and installed K5 on several HPs. A 10.10 maching and a CMW (10.09) secure operating system. The server is on the CMW machine. On the non-cmw machine, I get a ticket for myself and then telnet to the non-cmw machine from itself. I get the following: dsrocf:/krb5:374: bin/kinit jar Password for jar@dsdoe.ornl.gov: dsrocf:/krb5:375: klist Ticket cache: /tmp/krb5cc_0 Default principal: jar@dsdoe.ornl.gov Valid starting Expires Service principal 06 Jan 97 14:52:27 07 Jan 97 00:51:23 krbtgt/dsdoe.ornl.gov@dsdoe.ornl.gov dsrocf:/krb5:376: bin/telnet -l jar dsrocf 545 Trying 134.167.135.15... Connected to dsrocf.dsdoe.ornl.gov (134.167.135.15). Escape character is '^]'. [ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed: Decrypt integrity check failed ] [ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed: Decrypt integrity check failed ] telnetd: Authorization failed. Connection closed by foreign host. What's the problem?? Jim Rome >How-To-Repeat: >Fix: >Audit-Trail: Responsible-Changed-From-To: gnats-admin->tlyu Responsible-Changed-By: tlyu Responsible-Changed-When: Wed Mar 19 21:14:00 1997 Responsible-Changed-Why: Refiled State-Changed-From-To: open-analyzed State-Changed-By: tlyu State-Changed-When: Wed Mar 19 21:14:20 1997 State-Changed-Why: From: Tom Yu To: jar@ornl.gov Cc: krb5-bugs@MIT.EDU Subject: Re: krb5-misc/334: K5 problems Date: Wed, 19 Mar 1997 21:19:23 -0500 Thank you for your bug report. We apologize for not getting back to you sooner. 1. krb5-send-pr does *not* require emacs, although it's possible to use it from within emacs. 2. There are known to be potential problems with the pty code on AIX 4.x. I'm not certain of the status of the bugs though. 3. The change of the default kdc.conf location from PREFIX/lib/krb5kdc to PREFIX/var/krb5kdc was in fact documented in the top-level README file as well as some of the texinfo documentation. 4. The default keytab was changed from /etc/v5srvtab to /etc/krb5.keytab, which may result in a "decrypt integrity check failed" error. ---Tom State-Changed-From-To: analyzed-closed State-Changed-By: tlyu State-Changed-When: Thu Feb 19 19:22:58 1998 State-Changed-Why: stale. >Unformatted: