Why NOMSPAC is a valuable temporary inclusion in kerberos
Bob.Smart@csiro.au
Bob.Smart at csiro.au
Tue Dec 23 19:37:40 EST 2003
Douglas E. Engert's patch installs fairly easily on 1.3.1.
http://mailman.mit.edu/pipermail/krbdev/2003-August/001917.html.
It makes it practicable to use an AD KDC with older UDP-only
Kerberos apps. So please include it or equivalent. KX509 is
the application of interest to me, as per this example:
$ kinit
Password for sma045 at NEXUS.CSIRO.AU:
$ kx509
Weird! KX509 transmit packet is too large!
$ kdestroy
$ /opt/krb5/bin/kinit -m
Password for sma045 at NEXUS.CSIRO.AU:
$ kx509
Timed out waiting for response from a Kerberized Certificate Authority
As you can see there is no KCA running during this series.
Without -m it doesn't get as far as trying to contact kca.
Bob
More information about the Kerberos
mailing list