On Dec 5, 2007 7:19 AM, Love Hörnquist Åstrand <lha@kth.se> wrote: > Hello Hai, > > Yes, I re-added the bug somewhere inbetween to fix another problem > with the patch. > > Can you check if 1.0.2-RC5 fixes your problem, I think it should. No luck :( Attaching working patch for 1.0.1. I've actually merged 0.7.2 patch you've cooked in March without really understanding what's going on. > > Love > > > > 20 nov 2007 kl. 04.21 skrev Hai Zaar: > > > > It looks like the bug is back. In the nutshell. > > > > #> kinit haizaar > > haizaar@DOMAIN.COM password: > > #> kadmin -p haizaar list haizaar > > haizaar@DOMAIN.COM password: > > Love cooked a patch to alter kadmin behavior - if principal is > > specified explicitly, then use it and do not add /admin, etc. > > (http://www.mail-archive.com/heimdal-discuss@sics.se/msg00168.html) > > It looks like the patch was merged upstream. > > > > Although now I'm migrating from 0.7.2 to heimdal-1.0.1 and the problem > > popped out again. > > > > Here is the thead > > > > > > On Apr 21, 2007 10:17 PM, Love Hörnquist Åstrand <lha@kth.se> wrote: > >> Hello Hai, > >> > >> Check old marked email., Did I manged to include the delta in the > >> heimdal 0.8(.1) release ? > >> > >> Love > >> > >> > >> 28 feb 2007 kl. 14.01 skrev Hai Zaar: > >> > >> > >>> Hi, Love! > >>> Sorry for late reply. > >>> > >>> On 12/7/06, Love Hörnquist Åstrand <lha@kth.se> wrote: > >>>> 6 dec 2006 kl. 23.39 skrev Hai Zaar: > >>>> > >>>>> since I do not have kadmin/admin credential in cache. > >>>> > >>>> it will ask you for you password since the principal in the > >>>> credental > >>>> cache > >>>> doesn't match what it think its the default (your principal with / > >>>> admin added). > >>>> > >>>> If you specify the principal with -p it should work just fine. > >>> But after 2 month in production, I can confirm that your patch works > >>> just fine. Thanks again! > >>> It will be great to have it included in upcoming heimdal-0.8. > >>> > >>> > >>>> > >>>> $ kinit > >>>> lha@SU.SE's Password: > >>>> $ klist > >>>> Credentials cache: FILE:krb5cc_501 > >>>> Principal: lha@SU.SE > >>>> > >>>> Issued Expires Principal > >>>> Dec 7 00:04:57 Dec 7 10:06:00 krbtgt/SU.SE@SU.SE > >>>> Dec 7 00:04:58 Dec 7 10:06:00 afs@SU.SE > >>>> > >>>> $ kadmin -p lha > >>>> kadmin> get lha > >>>> Principal: lha@SU.SE > >>>> [...] > >>>> kadmin> ext -k /tmp/kaka host/nutcracker.it.su.se > >>>> kadmin> exit > >>>> $ klist > >>>> Credentials cache: FILE:krb5cc_501 > >>>> Principal: lha@SU.SE > >>>> > >>>> Issued Expires Principal > >>>> Dec 7 00:04:57 Dec 7 10:06:00 krbtgt/SU.SE@SU.SE > >>>> Dec 7 00:04:58 Dec 7 10:06:00 afs@SU.SE > >>>> Dec 7 00:05:07 Dec 7 01:05:07 kadmin/admin@SU.SE > >>>> $ kinit -t FILE:/tmp/kaka host/nutcracker.it.su.se@SU.SE > >>>> $ klist > >>>> Credentials cache: FILE:krb5cc_501 > >>>> Principal: host/nutcracker.it.su.se@SU.SE > >>>> > >>>> Issued Expires Principal > >>>> Dec 7 00:11:33 Dec 7 10:12:36 krbtgt/SU.SE@SU.SE > >>>> Dec 7 00:11:34 Dec 7 10:12:36 afs@SU.SE > >>>> > >>>> > >>>> > >>>> with this in the acl file: > >>>> > >>>> $ grep ^lha@ /var/heimdal/kadmind.acl > >>>> lha@SU.SE get lha@SU.SE > >>>> lha@SU.SE add,get,modify,cpw,del host/ > >>>> nutcracker.it.su.se > >>>> > >>>> > >>>> Love > >>>> > >>>> > >>>> > >>>> > >>>> > >>> > >>> > >>> -- > >>> Zaar > >> > >> > > > > > > > > -- > > Zaar > > -- Zaar
heimdal-1.0.1-kadmin-do-not-mess-with-instance-3.patch