wheezy, heimdal, openafs, possibly key problems

2013-04-02 Thread Anders Lennartsson
I'm trying to set up an OpenAFS fileserver and a Heimdal kdc, both running on a single wheezy box. Versions are as of today: OpenAFS 1.6.1-3 Heimdal 1.6~git20120403+dfsg1-2 But there is a problem with the afs KeyFile, it has the wrong kvno and although the kdc provides a kerberos ticket fo

Re: Heimdal Kerberos XDM and Login

2008-10-06 Thread Richard A Nelson
On Sat, 4 Oct 2008, Kelly Clowers wrote: On Sat, Oct 4, 2008 at 9:31 PM, Jason C. Wells <[EMAIL PROTECTED]> wrote: Does anyone know of a package for kerberized login and XDM, preferably heimdal? I wasn't able to scare one up. Login and xdm should use PAM, so as long as you

Re: Heimdal Kerberos XDM and Login

2008-10-04 Thread Kelly Clowers
On Sat, Oct 4, 2008 at 9:31 PM, Jason C. Wells <[EMAIL PROTECTED]> wrote: > Does anyone know of a package for kerberized login and XDM, preferably > heimdal? I wasn't able to scare one up. > > Regards, > Jason C. Wells > (who has Debian on the desktop for the fir

Heimdal Kerberos XDM and Login

2008-10-04 Thread Jason C. Wells
Does anyone know of a package for kerberized login and XDM, preferably heimdal? I wasn't able to scare one up. Regards, Jason C. Wells (who has Debian on the desktop for the first time after many years with FreeBSD) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subje

Re: heimdal kerberos on debian?

2007-05-24 Thread Predrag Gavrilovic
Project pages are at: http://www.pdc.kth.se/heimdal/ and manual at: http://www.h5l.se/manual/heimdal-0-7-branch/info/heimdal.html and you can install it too. Heimdal communicates with LDAP trough unix sockets and I believe that there is still a problem that heimdal expects it to be in /var/run

heimdal kerberos on debian?

2007-05-23 Thread Martin Marcher
Hello, does anyone have a link to a howto for heimdal kerberos (even basic)? i couldn't find anything for debian+heimdal(+openldap - heimdal can store it's data in ldap). I found this: http://www.openinput.com/auth-howto/index.html which seems to be somewhat the reference of heimda

libpam-heimdal (1.2.0-1) credential cache naming problem

2006-04-15 Thread Anders Lennartsson
I have a problem with libpam-heimdal (current sid, 1.2.0-1) on a client workstation running current sid, in that the credentials are misplaced(?) when I log in via ssh (from other machines as well as from the workstation itself. The whole thing seems to work ok for local logins (kdm and console

Re: Heimdal and cracklib

2003-12-18 Thread Anton Emmerfors
On Wed, Dec 17, 2003 at 01:04:57PM +0100, Anton Emmerfors wrote: > Hi, > > I'm looking to incorporate password quality control in my Heimdal KDC > using cracklib. I found the following in the Heimdal manuals: Sorry, this was not the appropriate list for this question. I have r

Heimdal and cracklib

2003-12-17 Thread Anton Emmerfors
Hi, I'm looking to incorporate password quality control in my Heimdal KDC using cracklib. I found the following in the Heimdal manuals: [password_quality] check_library = library check_function = function The function function i

Re: MIT versus Heimdal Kerberos 5

2003-01-13 Thread Frank Lenaerts
on Mon, Jan 13, 2003 at 07:54:10PM +0100, Frank Lenaerts wrote about Re: MIT versus Heimdal Kerberos 5: Some things I forgot. > > My understanding is that you don't, really, and that the Kerberos code > > that appears in X might have maybe done authentication but not I supp

Re: MIT versus Heimdal Kerberos 5

2003-01-13 Thread Frank Lenaerts
on Mon, Jan 13, 2003 at 12:10:17PM -0500, David Z Maze wrote about Re: MIT versus Heimdal Kerberos 5: > Frank Lenaerts <[EMAIL PROTECTED]> writes: > > I configured MIT Kerberos 5 and can now use kerberised telnet, ftp, > > rlogin and ssh. However, I also want to have X o

Re: MIT versus Heimdal Kerberos 5

2003-01-13 Thread David Z Maze
Frank Lenaerts <[EMAIL PROTECTED]> writes: > I configured MIT Kerberos 5 and can now use kerberised telnet, ftp, > rlogin and ssh. However, I also want to have X over Kerberos. My understanding is that you don't, really, and that the Kerberos code that appears in X might have maybe done authentica

MIT versus Heimdal Kerberos 5

2003-01-13 Thread Frank Lenaerts
Hi, I configured MIT Kerberos 5 and can now use kerberised telnet, ftp, rlogin and ssh. However, I also want to have X over Kerberos. I noticed that Heimdal Kerberos 5 provides kx and kxd but it seems that MIT Kerberos 5 does not have this or some other replacement. How do I configure X over

Re: AFS/Heimdal/Debian

2001-03-01 Thread Brian May
>>>>> "Sam" == Sam Hartman <[EMAIL PROTECTED]> writes: I have CCed this to bug #65387, as this has already been reported (but needs updating as follows). Sam> Brian and I were discussing this a few weeks ago, and the Sam> impression I got was that he

Re: AFS/Heimdal/Debian

2001-03-01 Thread Sam Hartman
the maintainer of the FAQ when I see him at the upcoming IETF. Matthew> How hard is a Heimdal->MIT migration? Can I do it Matthew> without needing to manually repopulate the key DB? Working on finding out for you. Don't know off the top of my head. >> 2) You need

Re: AFS/Heimdal/Debian

2001-03-01 Thread Matthew Palmer
when I read up on sources for Kerberos a few months ago. How hard is a Heimdal->MIT migration? Can I do it without needing to manually repopulate the key DB? > 2) You need to build your own Heimdal packages with krb4 support >compiled in if you want to use AFS. Brian's package

Re: AFS/Heimdal/Debian

2001-03-01 Thread Sam Hartman
1) MIT does have a pointer to Kerberos at cryptopublish.org which you can grab if you want MIT code outside the US. 2) You need to build your own Heimdal packages with krb4 support compiled in if you want to use AFS. Brian's packages are krb5 only.

AFS/Heimdal/Debian

2001-02-28 Thread Matthew Palmer
Sorry for the crossposting, but this touches several areas, and I'd like to hit all at once. I'm running a Heimdal KDC, and all is well with that. I've managed to get PAM doing it's thing, and a host of other little niggling problems. I'm now trying to add AFS into the

[OT] anyone know anything about a heimdal pam module?

2000-11-10 Thread Brendan Cully
Hi, In the past, when I was running MIT krb5, I played around with a couple different PAM modules (Frank Cusack's and Naomaru Itoi [sp, sorry Itoi]) with mixed results. Does anyone know 1) whether those modules build against heimdal-dev 2) whether they work 3) whether they lack that sec

Heimdal / Kerberos authentification with pam

2000-08-21 Thread Dirk Allard
Hi, does anybody know how to authenticate with pam against a kerberos server (I'm using the heimdal packages). The kerberos server is a win2000 installation. Thanks in advance, Dirk -- Dirk Allard BUGH Wuppertal - Polymere Materialien email [EMAIL PROTECTED] Tel +49-202-4393873 Fax

Re: Heimdal in more than one host...

2000-03-28 Thread Brian May
ween those Juha> machines. Once I figured out that heimdal's packages don't Juha> create correct /etc/krb5.conf file for me, it was relatively Juha> painless to get everything working within KDC If you haven't done so already, install heimdal-docs, and read /usr/do

Heimdal in more than one host...

2000-03-28 Thread Juha Ylitalo
nes. KDC machine has all things nicely, because I gave add host/some.thing in KDC machine. After surfing around in web and trying to modify bits and pieces that I found from there, I started to wonder if I would have to give myself "get" priviledges in /var/lib/heimdal-kdc/kadm5.acl, so th

Re: ITP Heimdal (Kerberos 5)

1999-12-28 Thread Peter S Galbraith
Wichert Akkerman wrote: > Previously Brian May wrote: > > - attempt upload to potato, non-us section. > > non-US isn't a section, it's an archive. What you probably want is the > section net of the main distribution of the non-US archive. (lets hope I > got all the terms right now..) > > Wicher

Heimdal

1999-12-28 Thread Brian May
Hello All, I have uploaded heimdal to non-us. Hopefully, this upload worked, and doesn't try to put it into the wrong place... Known problems: - debconf setup not properly implemented yet. - kdc package not yet tested. - still considering moving files from /usr/bin to /usr/lib/heimdal-cl