Skip Menu |
 

Download (untitled) / with headers
text/plain 4.1KiB
From gsin@abigail.mit.edu Wed Oct 7 16:47:22 1998
Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id QAA02286 for <bugs@RT-11.MIT.EDU>; Wed, 7 Oct 1998 16:47:22 -0400
Received: from ABIGAIL.MIT.EDU by MIT.EDU with SMTP
id AA18774; Wed, 7 Oct 98 16:47:08 EDT
Received: (from gsin@localhost) by abigail.mit.edu (8.7.1/8.7.1) id QAA01228; Wed, 7 Oct 1998 16:47:12 -0400 (EDT)
Message-Id: <199810072047.QAA01228@abigail.mit.edu>
Date: Wed, 7 Oct 1998 16:47:12 -0400 (EDT)
From: "Garrett H. Sin" <gsin@abigail.mit.edu>
Reply-To: gsin@abigail.mit.edu
To: krb5-bugs@MIT.EDU
Cc: gsin@MIT.EDU
Subject: FTP error messages
X-Send-Pr-Version: 3.99

Show quoted text
>Number: 640
>Category: krb5-appl
>Synopsis: GSSAPI errors on FTP to v5 host
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: krb5-unassigned
>State: closed
>Class: support
>Submitter-Id: unknown
>Arrival-Date: Wed Oct 07 16:48:01 EDT 1998
>Last-Modified: Fri Sep 28 21:29:56 EDT 2001
>Originator: Garrett H. Sin
>Organization:
MIT
Show quoted text
>Release: krb5-1.0.5
>Environment:

System: HP-UX abigail B.10.20 A 9000/782 2002244170 two-user license


Show quoted text
>Description:
Abigail is both a v5 host and client. Upon ftping from
abigail to abigail, I get GSSAPI errors indicating that
abigail is not in the Kerberos database. However, it
seems as though the authentication still suceeds!

Show quoted text
>How-To-Repeat:
abigail 37: ftp abigail
Connected to abigail.mit.edu.
220 abigail FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: Server not found in Kerberos database
GSSAPI error: initializing context
GSSAPI authentication succeeded
Name (abigail:gsin):
Show quoted text
>Fix:
I assume from the next to last line, that things have somehow
worked themselves out, but I don't understand the errors on
the previous three lines.
Show quoted text
>Audit-Trail:

From: Kev <klmitch@MIT.EDU>
To: gsin@abigail.mit.edu
Cc: krb5-bugs@MIT.EDU, gsin@MIT.EDU
Subject: Re: krb5-appl/640: FTP error messages
Date: Wed, 07 Oct 1998 21:03:12 EDT

Show quoted text
> >Description:
> Abigail is both a v5 host and client. Upon ftping from
> abigail to abigail, I get GSSAPI errors indicating that
> abigail is not in the Kerberos database. However, it
> seems as though the authentication still suceeds!

What's happening is somewhat confusing; ftpd supports both the principals
ftp/abigail.mit.edu@ATHENA.MIT.EDU AND host/abigail.mit.edu@ATHENA.MIT.EDU;
The client goes looking in the Kerberos database first for ftp/* and then
for host/* when it doesn't find the former...after generating the spurious
error messages you see below.

Show quoted text
> >How-To-Repeat:
> abigail 37: ftp abigail
> Connected to abigail.mit.edu.
> 220 abigail FTP server (Version 5.60) ready.
> 334 Using authentication type GSSAPI; ADAT must follow
> GSSAPI accepted as authentication type
> GSSAPI error major: Miscellaneous failure
> GSSAPI error minor: Server not found in Kerberos database
> GSSAPI error: initializing context
> GSSAPI authentication succeeded
> Name (abigail:gsin):

Hope this helps...
--
Kevin L. Mitchell <klmitch@mit.edu>
------------------------- -. .---- --.. ..- -..- --------------------------
http://web.mit.edu/klmitch/www/ (PGP5 keys availiable from here)
DSS Key ID ED0DB34E: D9BF 0E74 FDCB 43F5 C597 878F 9455 EC24 ED0D B34E
DH Key ID 2A2C31D4: 1A77 4BA5 9E32 14AE 87DA 9FEC 7106 FC62 2A2C 31D4

State-Changed-From-To: open-closed
State-Changed-By: tlyu
State-Changed-When: Fri Sep 28 21:29:40 2001
State-Changed-Why:

old support question

Show quoted text
>Unformatted: