How to Force a Kerb 4 Request
Henry B. Hotz
hotz at jpl.nasa.gov
Tue Nov 23 19:11:59 EST 2004
Looks like Heimdal, not MIT. What do you get with "kinit --version"?
(Heimdal will print a version message. MIT will ignore the option and
just try to authenticate you anyway.)
I was looking for an MIT equivalent, which I suspect might not exist.
On Nov 23, 2004, at 1:32 PM, Rachel Elizabeth Dillon wrote:
> From the kinit manpage in the most recent Debian version, which is
> 1.3.x:
>
> OPTIONS
> -5 get Kerberos 5 tickets. This overrides whatever the
> default
> built-in behavior may be. This option may be used with -4
>
> -4 get Kerberos 4 tickets. This overrides whatever the
> default
> built-in behavior may be. This option is only available if
> kinit was built with Kerberos 4 compatibility. This option
> may be used with -5
>
> I don't have a test server for Kerberos 4, but it works fine with my
> MIT
> account. Check your build for Kerberos 4 compatibility?
>
> Best of luck,
>
> -r.
>
> On Tue, Nov 23, 2004 at 01:26:24PM -0800, Henry B. Hotz wrote:
>> It appears that with 1.3.x you can't force it to make a kerberos 4
>> auth
>> request. I've tried putting only info in the [v4 realms]-like
>> sections
>> and disabling the DNS lookup on OSX 10.3, but then a kinit just fails.
>>
>> Is there any MIT equivalent to Heimdal kinit -4?
>>
>> Yes, I know this is a *BAD* idea and you-all hate it. I just have a
>> test case I need to support.
>> ----------------------------------------------------------------------
>> --
>> ----
>> The opinions expressed in this message are mine,
>> not those of Caltech, JPL, NASA, or the US Government.
>> Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu
>>
>> ________________________________________________
>> Kerberos mailing list Kerberos at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>
------------------------------------------------------------------------
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu
More information about the Kerberos
mailing list