Kadmin GSS-API Error

Kevin Coffman kwc at citi.umich.edu
Fri Sep 17 17:56:35 EDT 2004


> >>>>> "lyzhang" == Lynn Zhang <lyzhang at umich.edu> writes:
> 
> lyzhang> The kadmin from 1.2.8 wrote information to the log,
> lyzhang> Sep 17 17:02:47 Request: kadm5_init, admabcd/admin at LAUGUAGE.UMICH.ED
> U,
> lyzhang> success,
> lyzhang> client=admabcd/admin at LSA.UMICH.EDU, service=kadmin/admin at LAUGUAGE.UM
> ICH.EDU,
> lyzhang> addr=141.211.X.X
> 
> lyzhang> The one from 1.3.4 did not write any information to the log.
> 
> Interesting.  Did you see any logs from krb5kdc for an AS_REQ from the
> 1.3.4 client that failed?  I assume you see an AS_REQ logged from the
> 1.2.8 client.
> 
> ---Tom

The 1.2.8 servers Lynn is running against have our MD5 hack.
I took this out in the 1.3 code.

Lynn sent me this output:

>This one works,
> Sep 17 17:39:54 AS_REQ (1 etypes {1}) 141.211.67.94(88): ISSUE: authtime
> 1095457194, etypes {rep=1 tkt=1 ses=1}, admlynn/admin at LSA.UMICH.EDU for
> kadmin/admin at LSA.UMICH.EDU


>This one do not,

> Sep 17 17:40:28 AS_REQ (3 etypes {16 3 1}) 141.211.67.94(88): ISSUE:
> authtime 1095457228, etypes {rep=3 tkt=1 ses=3},
> admlynn/admin at LSA.UMICH.EDU for kadmin/admin at LSA.UMICH.EDU






More information about the Kerberos mailing list