Service ticket KfM 4.5.1 on OSX 10.2.3
Alexandra Ellwood
lxs at MIT.EDU
Tue Jan 21 11:43:00 EST 2003
>On Tue, 21 Jan 2003, Alexandra
>Ellwood wrote:
>
>> >I want to request a kerberos 5 service ticket from my kdc. When I type
>> >/usr/bin/kinit -S pop/email.psu.edu jsiegle and authenticate, I get a
>> >service ticket. However when I open
>> >/System/Library/CoreServices/Kerberos.app it tells me that the ticket I
>> >have is not valid. This happens when my only ticket is the service
>> >ticket. If I have both a tgt and the pop/email.psu.edu ticket, it works
>> >fine. Should it be giving me an error when I only have the
>> >pop/email.psu.edu ticket in my cache?
>>
>> Try ignoring the warning from Kerberos.app and launch your v5 mail
>> reader. Does the pop/email.psu.edu service ticket you acquired with
>> '/usr/bin/kinit -S' let you get mail?
>
>If I use fetchmail, it works fine. The problem is when I use Mail.app. I
>am working a problem with Apple because Mail.app doesn't want to use my
>pop/email.psu.edu ticket. I noticed the ticket error it gives me when I
>ran /System/Library/CoreServices/Kerberos.app and thought that maybe that
>is why Mail.app refuses to use my service ticket and insists on me
>getting new credentials.
So the problem is that the Kerberos login dialog pops up over
Mail.app when you only have a service ticket and no TGT? That sounds
like a problem with the Kerberos Login Library, not Mail.app. I will
file this in our bug database.
In the meantime, avoid using the -S option with kinit.
Hope this helps,
--lxs
--
-----------------------------------------------------------------------------
Alexandra Ellwood <lxs at mit.edu>
MIT Information Systems http://mit.edu/lxs/www/
-----------------------------------------------------------------------------
--
More information about the krbdev
mailing list