Skip Menu |

Download (untitled) / with headers
text/plain 3.3KiB
From Thu Dec 23 16:29:22 1999
Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU []) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id QAA05367 for <bugs@RT-11.MIT.EDU>; Thu, 23 Dec 1999 16:29:17 -0500
Received: from by MIT.EDU with SMTP
id AA10299; Thu, 23 Dec 99 16:29:05 EST
Received: from ( [])
by (8.8.8/8.8.8) with ESMTP id OAA06248
for <>; Thu, 23 Dec 1999 14:29:14 -0700 (MST)
Received: from CONVERSION-DAEMON by (PMDF V5.2-32 #38887) id <> for; Thu,
23 Dec 1999 14:29:12 -0700 (MST)
Received: from ([]) by (PMDF V5.2-32 #38887)
with ESMTP id <> for; Thu, 23 Dec 1999 14:29:09 -0700 (MST)
Received: by with Internet Mail Service (5.5.2448.0) id <Z3FBDKB0>; Thu, 23 Dec 1999 14:30:17 -0700
Message-Id: <>
Date: Thu, 23 Dec 1999 14:29:09 -0700
From: "Baker, William" <>
To: "'MIT Kerberos Bugs'" <krb5-bugs@MIT.EDU>
Subject: NASA use of MIT Kerberos?

Show quoted text
>Number: 796
>Category: pending
>Synopsis: NASA use of MIT Kerberos?
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: gnats-admin
>State: closed
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Thu Dec 23 16:30:00 EST 1999
>Last-Modified: Thu Apr 4 17:22:52 EST 2002
>Originator: "Baker, William" <>
Request for information...

1. We are using at NASA/JSC version 5, release 1.0 of Kerberos,
compiled for OSF Version 4.0D.
2. We were previously using a version of Kerberos sold by Digital
Equipment Corporation.
3. In using the new MIT version we have noticed some differences.
a. During build of the principal database, and extract
operations on the principal database, the krb5 KDC daemon disconnects from
the database.
b. During srvtab extraction from the database, the size of the
principal database grows, and seems to contain new information. This causes
old srvtab files to not be in synch with the principal database.
4. We are using kadmin.local now in place of the DEC kdb5_edit utility
for the build of the principal database, and the extraction of the srvtab
5. We are using the "glob" function under kadmin.local to extract large
groups of principals for the srvtab files.

We would appreciate some insite into why the KDC daemon disconnects from the
principal database, and its impact on real-time kerberos database queries,
We would like to understand why the extraction process causes the principal
database to grow, and why it results in old srvtab files no longer being
usable. Any possible workarounds for the srvtab and KDC problems would be
appreciated. A general explanation of how these systems work together, with
respect to kadmin.local, and any specifics regarding the items 1-4 listed
above would be helpful.

Bill Baker
Email ID: Baker, William
Lockheed-Martin, CSOC Contract.

Show quoted text

State-Changed-From-To: open-closed
State-Changed-By: hartmans
State-Changed-When: Thu Apr 4 17:22:49 2002

Show quoted text