Porting k5start to Heimdal

Chaskiel M Grundman cg2v at andrew.cmu.edu
Wed May 4 19:50:07 EDT 2005


--On Wednesday, May 04, 2005 11:16:31 -0700 Russ Allbery <rra at stanford.edu> 
wrote:

> Recently, I've had some interest in it from people using Heimdal.  I tried
> to port it, but I'm afraid that it is having problems outside of the scope
> of my experience, claiming that it can't find keys in the keytab or
> returning bad integrity or bad address errors when using the Heimdal
> libraries.

It's working ok for me so far:

sphinx# ./k5start -k /tmp/test_tkt -f /etc/krb5.keytab -u 
test/sphinx.andrew.cmu.edu -v -K 360
Kerberos initialization for test/sphinx.andrew.cmu.edu at ANDREW.CMU.EDU
Principal: test/sphinx.andrew.cmu.edu at ANDREW.CMU.EDU
Service principal: krbtgt/ANDREW.CMU.EDU at ANDREW.CMU.EDU
<other window>
sphinx# klist  -c /tmp/test_tkt
Credentials cache: FILE:/tmp/test_tkt
        Principal: test/sphinx.andrew.cmu.edu at ANDREW.CMU.EDU

  Issued           Expires          Principal
May  4 19:37:10  May  5 05:37:09  krbtgt/ANDREW.CMU.EDU at ANDREW.CMU.EDU


It doesn't seem to be inheriting any appdefaults or libdefaults (It 
acquires 10 hour, non-forwardable, non-addressless tickets, despite my 
configuration settings), but I know how to fix that if I get motivated to 
do so.


More information about the Kerberos mailing list