Nicolas.Williams at sun.com
Wed Aug 6 18:17:23 EDT 2008
On Wed, Aug 06, 2008 at 10:18:01AM -0500, Nicolas Williams wrote:
> On Wed, Aug 06, 2008 at 03:38:27AM +0000, Victor Sudakov wrote:
> > Victor Sudakov wrote:
> > > It is a pity I cannot check it out because Solaris' kadmin seems to be
> > > incompatible with FreeBSD's kadmind:
> > > $ kadmin
> > > kadmin: unable to get host based service name for realm SIBPTUS.TOMSK.RU
> > I see, Solaris kadmin looks for _kerberos-adm._udp.SIBPTUS.TOMSK.RU
> > What gives? FreeBSD's kadmind (Heimdal) does not listen on udp, it
> > uses 749/tcp.
> > Is there a way to make them work together, or is it hopeless?
> The kadmin protocol is not standard.
> Heimdal's kadmin protocol and MIT's (from which Solaris' derives) are
> incompatible. That said, later today I'll send out program source that
> might help you.
A while back I wrote a utility for building keytab files when using
Active Directory as the KDC; it uses the RFC3244 protocol to set the
"password" of the given principal, so it should work with Heimdal.
You can find it here:
More information about the Kerberos