Why NOMSPAC is a valuable temporary inclusion in kerberos

Bob.Smart@csiro.au Bob.Smart at csiro.au
Tue Dec 23 19:37:40 EST 2003


Douglas E. Engert's patch installs fairly easily on 1.3.1.
http://mailman.mit.edu/pipermail/krbdev/2003-August/001917.html.
It makes it practicable to use an AD KDC with older UDP-only
Kerberos apps. So please include it or equivalent. KX509 is
the application of interest to me, as per this example:

  $ kinit
  Password for sma045 at NEXUS.CSIRO.AU: 
  $ kx509
  Weird!  KX509 transmit packet is too large!
  $ kdestroy
  $ /opt/krb5/bin/kinit -m
  Password for sma045 at NEXUS.CSIRO.AU: 
  $ kx509
  Timed out waiting for response from a Kerberized Certificate Authority

As you can see there is no KCA running during this series.
Without -m it doesn't get as far as trying to contact kca.

Bob



More information about the Kerberos mailing list