Solaris K5, MIT K5 compatibility issues

Tom Yu tlyu at MIT.EDU
Fri Aug 10 09:17:01 EDT 2007


>>>>> "Will" == Will Fiveash <William.Fiveash at sun.com> writes:

Will> This is a long standing issue between MIT and Sun regarding the kadmin
Will> related principals.  For more read:
Will> http://krbdev.mit.edu/rt/Ticket/Display.html?id=3064

Will> The workaround on Solaris 10 is to set:

Will>     kpasswd_protocol = SET_CHANGE

Will> in krb5.conf.  Other than this Solaris 10 should be very compatible with
Will> a MIT KDC.

I think the problem mentioned in #3064 applies to 1.4.x as well as
1.6.x kadminds, so perhaps this is a different problem.  Getting logs
from the KDC to see what principals are actually requested by the
kadmin client may help.  Thanks for the reminder about #3064.  I'll
try to take another look at it.

---Tom



More information about the Kerberos mailing list