to eDirectory using Kerberos

[Jiri Toman]

Dear,
where can I get anz information about authentication
to eDirectory using Kerberos.
Sincerely Jiri Toman
tomanj at ssps.zcu.czzFrom john at iastate.edu Wed Jan 21 22:16:34 2004
Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU
	[18.7.21.83])
	by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id i0M3GXqb028234
	for <kerberos at PCH.mit.edu>; Wed, 21 Jan 2004 22:16:33 -0500 (EST)
Received: from mailhub-3.iastate.edu (mailhub-3.iastate.edu [129.186.140.13])
	i0M3GWYR004237
	for <kerberos at mit.edu>; Wed, 21 Jan 2004 22:16:33 -0500 (EST)
Received: from mailout-1.iastate.edu (mailout-1.iastate.edu [129.186.140.1])
	i0M3GVE6008682;	Wed, 21 Jan 2004 21:16:31 -0600
Received: from pvtest.ait.iastate.edu(129.186.145.229) by
	mailout-1.iastate.edu via csmap 
	id a4ec1946_4c89_11d8_8ea7_003048290bef_14084;
	Wed, 21 Jan 2004 21:18:26 -0600 (CST)
Received: from localhost (john at localhost)
	by pvtest.ait.iastate.edu (8.8.8/8.8.5) with SMTP id VAA30733;
	Wed, 21 Jan 2004 21:15:56 -0600 (CST)
Message-Id: <200401220315.VAA30733 at pvtest.ait.iastate.edu>
To: openafs-info at openafs.org, kerberos at mit.edu
Date: Wed, 21 Jan 2004 21:15:56 CST
From: John Hascall <john at iastate.edu>
Subject: Mystery AFS/Kerberos packet
X-BeenThere: kerberos at mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Help: <mailto:kerberos-request at mit.edu?subject=help>
List-Post: <mailto:kerberos at mit.edu>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
	<mailto:kerberos-request at mit.edu?subject=subscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
	<mailto:kerberos-request at mit.edu?subject=unsubscribe>
X-List-Received-Date: Thu, 22 Jan 2004 03:16:34 -0000


We are running OpenAFS 1.2.11, but not kaserver,
we are running MIT Kerberos 1.2.6 (but not on the "afs db servers"),
we are using the kaforwarder/fakeka stuff.

For most of our users this works fine.  I have one user
who can't authenticate his PC.

I am seeing the following packets arrive at the afs db server
which look like some sort of a K5 request for an afs ticket:

6303373b766d61124537XXXXXXXX0000494153544154452e4544550067710e403f6166730000
 c . 7 ; v m a . E 7 u s e r . . I A S T A T E . E D U . g q . @ ? a f s . .

except the first byte (packet type) of 0x63 seems to be unknown.


Any ideas what this is?

Is this some new feature of some new version of AFS with which I
am unfamiliar?


John