In the meantime I set-up an entirely new box, based on Ubuntu 64 bit
instead of Debian 32 bit. And now I'm encountering the same issues
there (same version of the packages, so no major suprise there).

What I tried:
=============

* I used ktutil to reduce the entries in my keytab. Nice tool.

  I'm down to two entries, and with that shortened keytab it's working OK on my 
old machine
  (1.8.3+dfsg-4squeeze6) but not on the new one.

  # klist -ke /etc/krb5.keytab
  Keytab name: WRFILE:/etc/krb5.keytab
  KVNO Principal
  ---- 
--------------------------------------------------------------------------
     1 host/vpn-gw.charite...@charite.de (DES cbc mode with CRC-32) 
     1 openvpn-krb5/vpn-gw.charite...@charite.de (DES cbc mode with CRC-32) 

  The same command on the new box (1.10+dfsg~beta1-2ubuntu0.3) gives:

  # klist -ke /etc/krb5.keytab
  Keytab name: FILE:/etc/krb5.keytab
  KVNO Principal
  ---- 
--------------------------------------------------------------------------
     1 host/vpn-gw.charite...@charite.de (des-cbc-crc) 
     1 openvpn-krb5/vpn-gw.charite...@charite.de (des-cbc-crc) 

* I built t_vfy_increds according to your instructions:
  
  # KRB5_TRACE=/tmp/krb5_tracefile.txt ./t_vfy_increds
  t_vfy_increds: ../../../../src/lib/krb5/krb/t_vfy_increds.c:48: main: 
Assertion krb5_cc_start_seq_get(context, ccache, &cursor) == 0' failed.
  Aborted (core dumped)
 
  And no trace file either.
  

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebra...@charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to