home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.protocols.kerberos
- Path: sparky!uunet!stanford.edu!news
- From: bagate!socrates!bbh7rq5 (Davies)
- Subject: Kinit & kpasswd in kerberosV5 (Sandia dist.)
- Message-ID: <9209151738.AA01050@einstein.wash.bell-atl.com>
- Sender: news@shelby.stanford.edu (USENET News System)
- Organization: Internet-USENET Gateway at Stanford University
- Date: Tue, 15 Sep 1992 17:43:47 GMT
- Lines: 73
-
- Hello,
-
- I am working on configuring Kerberos V5 (Sandia distribution) and am having
- some troubles with kinit and kpasswd. The kdc is up and running and
- the database has been initialized and a few users added.
-
- When I run kinit, I get the following:
- =======================================================================
- kerberos:cdavies$ kinit cdavies
- Enter password:
-
- Enter Your SecurId Access Code Prepended with Your PIN
- (or a '#'if Your PIN is entered on the card keypad)
- or Type return <CR> if You Do NOT Use a SecurId Card:
- kinit: Password has expired. Use kpassword to renew.
- =======================================================================
-
- I find it strange that it tells me to run "kpassword" instead of "kpasswd".
-
-
-
-
-
-
-
- Then, when I run kpasswd I get:
- =======================================================================
- kerberos:cdavies$ kpasswd
- Old password for cdavies@SOCRATES.BELL-ATL.COM:
-
- Unable to Get Initial Credentials : Program lacks support for key type -17653282
- 35
-
-
- Protocol Failure - Password NOT Changed.
- =======================================================================
-
-
-
-
- Also, when I first compiled kpasswd and ran it, I got a message:
- unknown symbol: _des_string_to_key
-
- So, after looking through the header files, I noticed that des_string_to_key
- and mit_des_string_to_key #defined to be the same. So, I changed kpasswd.c
- from:
- if (retval = des_string_to_key(arg->password.data,
- v4_keyptr)) {
- to:
- if (retval = mit_des_string_to_key(arg->password.data,
- v4_keyptr)) {
-
- This seemed to make kpasswd work better. (At least no unknown symbol)
-
-
- Any help on these errors?
-
- Thanks in advance...
- Chris
-
-
- --
-
- *******************************************************************************
-
- Chris Davies e-mail: cdavies@socrates.bell-atl.com
- Bell Atlantic Voice: (301) 989-4111
- Fax: (301) 595-1341
-
-
- Note: If your e-mail reply to me bounces, try sending it explicitly to
- cdavies@socrates.bell-atl.com instead of using the 'reply' feature.
- ******************************************************************************
-