[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Getting Heimdal kaserver to work...



Ok, I found and built the KTH KRB4 sources, now I just need to remember how to
configure kadmin to allow the use of afs(cell) salted passwords...

Quoting "Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>:

> On Fri, 2002-03-08 at 23:02, Eric Knudstrup wrote:
> > Ok, I have it so I can kinit to my kaserver-sourced db (and klist),
> but klog.krb
> > doesn't work and the kdc isn't listening on the kaserver port.
> > So, what do I try next?
> 
> You did build heimdal with kaserver support (configure
> --enable-kaserver)?
> 
> You also need /var/heimdal/kdc.conf with at least the following:
> 
> [kdc]
> 	require-preauth = false		# or v4/afs will lose
> 	enable-kerberos4 = true
> 	enable-kaserver = true
> 	check-ticket-addresses = false	# ssh w/krb4+afs wants this
> 
> (Someone who actually understands what's going on should confirm; I
> got
> the above via trial and error, since we kinda ended up being the beta
> test site for heimdal's kaserver emulation :)
> 
> -- 
> brandon s. allbery   [os/2][linux][solaris][japh] 
> allbery@kf8nh.apk.net
> system administrator      [WAY too many hats]       
> allbery@ece.cmu.edu
> electrical and computer engineering                               
> KF8NH
> carnegie mellon university  ["better check the oblivious first"
> -ke6sls]
> 
>