Proposal: Support for 32 bit version numbers in keytabs

Douglas E. Engert deengert at anl.gov
Thu Dec 2 13:53:14 EST 2004



Jeffrey Altman wrote:
> Java uses the Version 1 format of the MIT keytab file.

There is also DCE, but I don't know who is still using it.
Last time we used it it was using version 2 keytabs.

> 
> Jeffrey Altman
> 
> Ezra Peisach wrote:
> 
>>> How does this work with SEAM on Solaris or HP's Kerberos or any other
>>> vendor?
>>
>>
>>
>> The short answer is - I do not know.
>>
>> If HP's kerberos is really based on MIT 1.2.2 release (according to one
>> web site) - then they do not have the vno > 240 hacks - but the file
>> reading code should be the same.
>>
>> SEAM: Nico can speak better to this...
>>
>> Other vendors - I do not know...  Regretfully, as far as I know - 
>> there is
>> no published standard for the keytab file. Please correct me if I am
>> wrong.
>>
>> Does anyone know of the interoperability of keytabs? Remember - we will
>> still be able to read - or import the older format (say from Windows)...
>>
>> I suppose we can setup a flag in krb5.conf to not produce this
>> extended keytab file for those that need it...
>>
>>
>> Ezra
>>
>>
>> _______________________________________________
>> krbdev mailing list             krbdev at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/krbdev
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444


More information about the krbdev mailing list