Ticket History #334: K5 problems

From JAR@FED.ORNL.GOV Mon Jan 6 14:54:29 1997
Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.69.0.28]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id OAA24992 for <bugs@RT-11.MIT.EDU>; Mon, 6 Jan 1997 14:54:28 -0500
Received: from fed.ornl.gov by MIT.EDU with SMTP
id AA21539; Mon, 6 Jan 97 14:54:26 EST
Received: from FED.ORNL.GOV by FED.ORNL.GOV (PMDF V5.0-6 #12522)
id <01IDWAHEYBXU8X91N0@FED.ORNL.GOV> for krb5-bugs@mit.edu; Mon,
06 Jan 1997 14:54:20 -0500 (EST)
Message-Id: <01IDWAHEYCW48X91N0@FED.ORNL.GOV>
Date: Mon, 06 Jan 1997 14:54:20 -0500 (EST)
From: jar@ornl.gov
Sender: "Jim Rome (423) 574-1306 E-mail: jar@ornl.gov" <JAR@FED.ORNL.GOV>
To: krb5-bugs@MIT.EDU
Subject: K5 problems

1) krb5-send-pr requires emacs which we don't like and don't have.

2) I was unsuccessful in getting k5 to make on AIX 4.1.x. I got
/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: undefined reference to `odm_free_list'
/lib/libc.a(getttyent.o)(.pr+0xac):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: undefined reference to `getattr'
/lib/libc.a(getttyent.o)(.pr+0xf8):../../../../../../../src/bos/usr/ccs/lib/libc
/getttyent.c: relocation truncated to fit: 0x1a getattr
/lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: undefined reference to `odm_free_list'
/lib/libc.a(getttyent.o)(.pr+0x154):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: relocation truncated to fit: 0x1a odm_free_list
/lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: undefined reference to `odm_terminate'
/lib/libc.a(getttyent.o)(.pr+0x15c):../../../../../../../src/bos/usr/ccs/lib/lib
c/getttyent.c: relocation truncated to fit: 0x1a odm_terminate
/usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: getttyent.o: loader reloc in read-only
section .text
/usr/local/powerpc-ibm-aix4.1.3.0/bin/ld: final link failed: Invalid operation
make: 1254-004 The error code from the last command is 1.

3) The new version seems to require that kdc.conf be in xx/var/krb5kdc, where xx
is the default location. This is undocumented, and differs from beta7.

4) I have made and installed K5 on several HPs. A 10.10 maching and a CMW
(10.09) secure operating system. The server is on the CMW machine. On the
non-cmw machine, I get a ticket for myself and then telnet to the non-cmw
machine from itself. I get the following:
dsrocf:/krb5:374: bin/kinit jar
Password for jar@dsdoe.ornl.gov:
dsrocf:/krb5:375: klist
Ticket cache: /tmp/krb5cc_0
Default principal: jar@dsdoe.ornl.gov

Valid starting Expires Service principal
06 Jan 97 14:52:27 07 Jan 97 00:51:23 krbtgt/dsdoe.ornl.gov@dsdoe.ornl.gov
dsrocf:/krb5:376: bin/telnet -l jar dsrocf 545
Trying 134.167.135.15...
Connected to dsrocf.dsdoe.ornl.gov (134.167.135.15).
Escape character is '^]'.
[ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed:
Decrypt integrity check failed ]
[ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed:
Decrypt integrity check failed ]
telnetd: Authorization failed.
Connection closed by foreign host.

What's the problem??

Jim Rome

Responsible-Changed-From-To: gnats-admin->tlyu
Responsible-Changed-By: tlyu
Responsible-Changed-When: Wed Mar 19 21:14:00 1997
Responsible-Changed-Why:

Refiled

State-Changed-From-To: open-analyzed
State-Changed-By: tlyu
State-Changed-When: Wed Mar 19 21:14:20 1997
State-Changed-Why:



From: Tom Yu <tlyu@MIT.EDU>
To: jar@ornl.gov
Cc: krb5-bugs@MIT.EDU
Subject: Re: krb5-misc/334: K5 problems
Date: Wed, 19 Mar 1997 21:19:23 -0500

Thank you for your bug report. We apologize for not getting back to
you sooner.

1. krb5-send-pr does *not* require emacs, although it's possible to
use it from within emacs.

2. There are known to be potential problems with the pty code on AIX
4.x. I'm not certain of the status of the bugs though.

3. The change of the default kdc.conf location from PREFIX/lib/krb5kdc
to PREFIX/var/krb5kdc was in fact documented in the top-level README
file as well as some of the texinfo documentation.

4. The default keytab was changed from /etc/v5srvtab to
/etc/krb5.keytab, which may result in a "decrypt integrity check
failed" error.

---Tom

State-Changed-From-To: analyzed-closed
State-Changed-By: tlyu
State-Changed-When: Thu Feb 19 19:22:58 1998
State-Changed-Why:

stale.