Interesting experiment

Booker C. Bense bbense at networking.stanford.edu
Mon Feb 11 11:30:00 EST 2002


- Recently, while helping a vendor install some kerberized
software, a interesting experiment took place by accident.
In the start up file for the deamon, KRB5_CONFIG was set
to point to the keytab rather than the krb5.conf file.

- In one sense, the results were pretty encouraging. The
application actually ran just fine with garbage data in
krb5.conf. It didn't work, but it didn't dump core either.
In another sense, it was sort of discouraging
in that the library didn't report any kind of meaningful
error. Basically it was saying it couldn't find the
service principal in the keytab file.

- I'm not sure where I'm going with this, but it was sort of
interesting to see what actually happened.

- Booker C. Bense




More information about the krbdev mailing list