Porting k5start to Heimdal

Luke Howard lukeh at padl.com
Wed May 4 19:02:31 EDT 2005


Note that also Heimdal includes the kcm daemon, which can effectively
do the same thing (acquire credentials using a keytab, and/or keep on
renewing them).

It would be great to see k5start work with Heimdal -- I think I might
have tried at one point but given up :-)

-- Luke

>From: Russ Allbery <rra at stanford.edu>
>Subject: Porting k5start to Heimdal
>To: kerberos at MIT.EDU
>Date: Wed, 04 May 2005 11:16:31 -0700
>Organization: The Eyrie
>
>Hello folks,
>
>I maintain a modified version of kinit that can run as a daemon to
>maintain a ticket cache for another application and can also run a
>particular command and renew credentials until the command exits (using a
>keytab).  We use MIT Kerberos v5 at Stanford for almost everything, so
>that's what it was developed against.
>
>Recently, I've had some interest in it from people using Heimdal.  I tried
>to port it, but I'm afraid that it is having problems outside of the scope
>of my experience, claiming that it can't find keys in the keytab or
>returning bad integrity or bad address errors when using the Heimdal
>libraries.
>
>kstart is covered under an MIT-style license and is at:
>
>    <http://www.eyrie.org/~eagle/software/kstart/>
>
>Any help with the porting that anyone could offer would be greatly
>appreciated.  I'd really like to support Heimdal as well as MIT.  Note
>that right now, you need KTH Kerberos as well or need to hack on the
>Makefile a little bit; the next version will have a configure option to
>disable Kerberos v4 support.
>
>Also, any hints on how to do K5 error handling in a way that works with
>both Heimdal and MIT would be greatly appreciated.
>
>-- 
>Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos

--


More information about the Kerberos mailing list