Solaris K5, MIT K5 compatibility issues
Tom Yu
tlyu at MIT.EDU
Fri Aug 10 09:17:01 EDT 2007
>>>>> "Will" == Will Fiveash <William.Fiveash at sun.com> writes:
Will> This is a long standing issue between MIT and Sun regarding the kadmin
Will> related principals. For more read:
Will> http://krbdev.mit.edu/rt/Ticket/Display.html?id=3064
Will> The workaround on Solaris 10 is to set:
Will> kpasswd_protocol = SET_CHANGE
Will> in krb5.conf. Other than this Solaris 10 should be very compatible with
Will> a MIT KDC.
I think the problem mentioned in #3064 applies to 1.4.x as well as
1.6.x kadminds, so perhaps this is a different problem. Getting logs
from the KDC to see what principals are actually requested by the
kadmin client may help. Thanks for the reminder about #3064. I'll
try to take another look at it.
---Tom
More information about the Kerberos
mailing list