How to Force a Kerb 4 Request

[Rachel Elizabeth Dillon]

I'm 99.999% certain this is MIT kerberos.

rachel at meow:~$ kinit --version
kinit: invalid option -- -
kinit: invalid option -- e
Bad lifetime value sion
<usage message snipped>

The manpage came from Debian, but I don't have anything Heimdal installed.

-r.


On Tue, Nov 23, 2004 at 04:11:59PM -0800, Henry B. Hotz wrote:
> Looks like Heimdal, not MIT.  What do you get with "kinit --version"?   
> (Heimdal will print a version message.  MIT will ignore the option and  
> just try to authenticate you anyway.)
> 
> I was looking for an MIT equivalent, which I suspect might not exist.
> 
> On Nov 23, 2004, at 1:32 PM, Rachel Elizabeth Dillon wrote:
> 
> >From the kinit manpage in the most recent Debian version, which is  
> >1.3.x:
> >
> >OPTIONS
> >       -5     get Kerberos 5 tickets.  This overrides whatever the  
> >default
> >		built-in behavior may be.  This option may be used with -4
> >
> >       -4     get  Kerberos 4 tickets.  This overrides whatever the  
> >default
> >		built-in behavior may be.  This option is only available if
> >		kinit was built with Kerberos 4 compatibility.  This option
> >		may be used with -5
> >
> >I don't have a test server for Kerberos 4, but it works fine with my  
> >MIT
> >account.  Check your build for Kerberos 4 compatibility?
> >
> >Best of luck,
> >
> >-r.
> >
> >On Tue, Nov 23, 2004 at 01:26:24PM -0800, Henry B. Hotz wrote:
> >>It appears that with 1.3.x you can't force it to make a kerberos 4  
> >>auth
> >>request.  I've tried putting only info in the [v4 realms]-like  
> >>sections
> >>and disabling the DNS lookup on OSX 10.3, but then a kinit just fails.
> >>
> >>Is there any MIT equivalent to Heimdal kinit -4?
> >>
> >>Yes, I know this is a *BAD* idea and you-all hate it.  I just have a
> >>test case I need to support.
> >>---------------------------------------------------------------------- 
> >>--
> >>----
> >>The opinions expressed in this message are mine,
> >>not those of Caltech, JPL, NASA, or the US Government.
> >>Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu
> >>
> >>________________________________________________
> >>Kerberos mailing list           Kerberos at mit.edu
> >>https://mailman.mit.edu/mailman/listinfo/kerberos
> >>
> ------------------------------------------------------------------------ 
> ----
> The opinions expressed in this message are mine,
> not those of Caltech, JPL, NASA, or the US Government.
> Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20041123/731b136c/attachment.bin