Kerb v4 for MacOS X

[Ruben Carbonell]

Hi,

  I'm not sure if we're doing "pre-authentication" as I don't know
what that means; however, if the clock is off by 1 hr (or I also
tried 9 hours) I do get a "Service Expired" message by both Kerberos
for Mac OS 8.6 and Mac OS X 10.1.2. And I do have 4.0b7 on both
OS versions.

If it helps, I've attached our Kerberos preferences file.

Please let me know what else I can do to help you find and alter
this error text. :)
Thanks as usual
--Ruben

>> 3) Kerberos for Mac generates a "Service Expired" message if the
>> Time is out of bounds / off synch. Users get confused by this: Could
>> the error message be changed to something with the word "time" in
>> it; even Time Out of Bounds is fine.
>
> That's interesting. Are you using any form of preauthentication? I could
> have sworn we verified this and it worked fine in our setup.
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: edu.mit.Kerberos
Type: application/text
Size: 3860 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20020205/53ba65b0/attachment.bin
-------------- next part --------------
[libdefaults]
	default_realm = ANDREW.CMU.EDU
	default_tgs_enctypes = des-cbc-crc
	default_tkt_enctypes = des-cbc-crc
	clockskew = 300
	checksum_type = 1

[domain_realm]
.andrew.cmu.edu = ANDREW.CMU.EDU
.acs.cmu.edu  = ANDREW.CMU.EDU
.cc.cmu.edu   = ANDREW.CMU.EDU
.res.cmu.edu  = ANDREW.CMU.EDU
.epp.cmu.edu  = ANDREW.CMU.EDU
.as.cmu.edu   = ANDREW.CMU.EDU
.hss.cmu.edu  = ANDREW.CMU.EDU
.lcl.cmu.edu  = ANDREW.CMU.EDU
.phil.cmu.edu = ANDREW.CMU.EDU
.phys.cmu.edu = ANDREW.CMU.EDU
.cfa.cmu.edu  = ANDREW.CMU.EDU
.math.cmu.edu = ANDREW.CMU.EDU
.net.cmu.edu  = ANDREW.CMU.EDU
.psy.cmu.edu  = ANDREW.CMU.EDU
.arc.cmu.edu  = ANDREW.CMU.EDU
.ce.cmu.edu   = ANDREW.CMU.EDU
.library.cmu.edu = ANDREW.CMU.EDU
.cees.cmu.edu = ANDREW.CMU.EDU
.cheme.cmu.edu = ANDREW.CMU.EDU
.gsia.cmu.edu = ANDREW.CMU.EDU
.heinz.cmu.edu = ANDREW.CMU.EDU
.ini.cmu.edu = ANDREW.CMU.EDU
.me.cmu.edu  = ANDREW.CMU.EDU
.csw.cmu.edu = ANDREW.CMU.EDU
.club.cc.cmu.edu = CLUB.CC.CMU.EDU
.cs.cmu.edu  = CS.CMU.EDU
.ri.cmu.edu  = CS.CMU.EDU
.edrc.cmu.edu = CS.CMU.EDU
.ices.cmu.edu = CS.CMU.EDU
cs.cmu.edu   = CS.CMU.EDU
ri.cmu.edu   = CS.CMU.EDU
edrc.cmu.edu = CS.CMU.EDU
ices.cmu.edu = CS.CMU.EDU
.se.cs.cmu.edu = ANDREW.CMU.EDU
.evol.ri.cmu.edu = ANDREW.CMU.EDU
.mit.edu = ATHENA.MIT.EDU
dew.epp.cmu.edu = ECE.CMU.EDU

[realms]
ANDREW.CMU.EDU = {
  kdc = vice28.fs.andrew.cmu.edu:88
  kdc = vice2.fs.andrew.cmu.edu:88
  kdc = vice11.fs.andrew.cmu.edu:88
  kdc = vice12.fs.andrew.cmu.edu:88
  admin_server = vice28.fs.andrew.cmu.edu
  default_domain = ANDREW.CMU.EDU
  string_to_key_type = mit_string_to_key
}
ATHENA.MIT.EDU = {
  kdc = kerberos.mit.edu:88
  kdc = kerberos-2.mit.edu:88
  admin_server = kerberos.mit.edu
  default_domain = MIT.EDU
}
CS.CMU.EDU = {
  kdc = kerberos.cs.cmu.edu:88
  kdc = kerberos-2.srv.cs.cmu.edu:88
  admin_server = kerberos.cs.cmu.edu
  default_domain = CS.CMU.EDU
  v4_instance_convert = {
    postoffice = postoffice.srv.cs.cmu.edu
    auchentoshan = auchentoshan.pdl.cs.cmu.edu
  }
}
     
[v4 realms]
ANDREW.CMU.EDU = {
  kdc = vice7.fs.andrew.cmu.edu
  kdc = vice2.fs.andrew.cmu.edu
  kdc = vice11.fs.andrew.cmu.edu
  kdc = vice28.fs.andrew.cmu.edu
  kdc = vice12.fs.andrew.cmu.edu
  admin_server = vice28.fs.andrew.cmu.edu
  default_domain = ANDREW.CMU.EDU
  string_to_key_type = mit_string_to_key
}
ATHENA.MIT.EDU = {
  kdc = kerberos.mit.edu
  kdc = kerberos-1.mit.edu
  kdc = kerberos-2.mit.edu
  kdc = kerberos-3.mit.edu
  admin_server = kerberos.mit.edu
  default_domain = mit.edu
  string_to_key_type = mit_string_to_key
}
CS.CMU.EDU = {
  kdc = kerberos.cs.cmu.edu
  kdc = kerberos-2.srv.cs.cmu.edu
  admin_server = kerberos.cs.cmu.edu
  default_domain = CS.CMU.EDU
  string_to_key_type = mit_string_to_key
}
 		
[v4 domain_realm]
.andrew.cmu.edu = ANDREW.CMU.EDU
.acs.cmu.edu  = ANDREW.CMU.EDU
.cc.cmu.edu   = ANDREW.CMU.EDU
.res.cmu.edu  = ANDREW.CMU.EDU
.epp.cmu.edu  = ANDREW.CMU.EDU
.as.cmu.edu   = ANDREW.CMU.EDU
.hss.cmu.edu  = ANDREW.CMU.EDU
.lcl.cmu.edu  = ANDREW.CMU.EDU
.phil.cmu.edu = ANDREW.CMU.EDU
.phys.cmu.edu = ANDREW.CMU.EDU
.cfa.cmu.edu  = ANDREW.CMU.EDU
.math.cmu.edu = ANDREW.CMU.EDU
.net.cmu.edu  = ANDREW.CMU.EDU
.psy.cmu.edu  = ANDREW.CMU.EDU
.arc.cmu.edu  = ANDREW.CMU.EDU
.ce.cmu.edu   = ANDREW.CMU.EDU
.library.cmu.edu = ANDREW.CMU.EDU
.cees.cmu.edu = ANDREW.CMU.EDU
.cheme.cmu.edu = ANDREW.CMU.EDU
.gsia.cmu.edu = ANDREW.CMU.EDU
.heinz.cmu.edu = ANDREW.CMU.EDU
.ini.cmu.edu = ANDREW.CMU.EDU
.me.cmu.edu  = ANDREW.CMU.EDU
.csw.cmu.edu = ANDREW.CMU.EDU
.club.cc.cmu.edu = CLUB.CC.CMU.EDU
.cs.cmu.edu  = CS.CMU.EDU
.ri.cmu.edu  = CS.CMU.EDU
.edrc.cmu.edu = CS.CMU.EDU
.ices.cmu.edu = CS.CMU.EDU
cs.cmu.edu   = CS.CMU.EDU
ri.cmu.edu   = CS.CMU.EDU
edrc.cmu.edu = CS.CMU.EDU
ices.cmu.edu = CS.CMU.EDU
.se.cs.cmu.edu = ANDREW.CMU.EDU
.evol.ri.cmu.edu = ANDREW.CMU.EDU
.mit.edu = ATHENA.MIT.EDU
dew.epp.cmu.edu = ECE.CMU.EDU