Re: kerberosV with kerberosIV compatibility

To: Love <lha%stacken.kth.se@localhost>
Subject: Re: kerberosV with kerberosIV compatibility
From: "Tracy J. Di Marco White" <gendalia%iastate.edu@localhost>
Date: Thu, 02 Nov 2000 05:51:47 CST
}"Tracy J. Di Marco White" <gendalia%iastate.edu@localhost> writes:
}
}> }What are you trying to do. Get a krb4 ticket directly ?
}> 
}> What I'd most like to do is to login and get K5 & K4 tickets automatically.
}> Failing that, log in and get K5 tickets then be able to kinit -4 and get K4
}> tickets.  I don't necessarily have krb5.conf set up correctly to do that,
}> but I've gotten several different answers about how to set that up, and have
}> no idea which one is correct.
}
}The code uses the same function to get the hosts in the get-initial-ticket
}and convert-krb5-to-krb4-tickets. So it should just work. Can you tcpdump
}and see what servers you are trying to talk to ?
 
Sure, I'll put that at the end.

}> I'd also love to be able to use encrypted telnet between our standard K4
}> clients and NetBSD's K5/K4 enabled telnet(d).
}
}Then you'll need a srvtab, if you have a keytab it can be converted using
}`ktutil key2srvtab'.

I have both a keytab and a srvtab, and krb5.conf is set up:
[libdefaults]
        ticket_lifetime = 600
        default_realm = IASTATE.EDU
        default_tkt_enctypes = des-cbc-crc
        default_tgs_enctypes = des-cbc-crc
        krb4_srvtab = /etc/srvtab
        krb4_config = /etc/krb.conf
        krb4_realms = /etc/krb.realms

The 3 krb4 files are there.

Tracy J. Di Marco White
Project Vincent Systems Manager
gendalia%iastate.edu@localhost

tcpdump of doing kinit gendalia:

05:31:54.914502 bb.cc.iastate.edu.64845 > ns-1.iastate.edu.domain:  48368+ SRV 
? _kerberos._udp.IASTATE.EDU. (44)
05:31:54.917421 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64845:  48368 2/1/2 
(196)
05:31:54.917741 bb.cc.iastate.edu.64844 > ns-1.iastate.edu.domain:  48369+ SRV 
? _kerberos._tcp.IASTATE.EDU. (44)
05:31:54.920607 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64844:  48369 2/1/2 
(196)
05:31:54.920772 bb.cc.iastate.edu.64843 > ns-1.iastate.edu.domain:  48370+ SRV 
? _kerberos._http.IASTATE.EDU. (45)
05:31:54.922909 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64843:  48370 
NXDomain* 0/1/0 (101)
05:31:54.923569 bb.cc.iastate.edu.64842 > ns-1.iastate.edu.domain:  48371+ 
AAAA? kerberos-1.iastate.edu. (40)
05:31:54.925783 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64842:  48371* 
0/1/0 (96)
05:31:54.925874 bb.cc.iastate.edu.64841 > ns-1.iastate.edu.domain:  48372+ A? 
kerberos-1.iastate.edu. (40)
05:31:54.929487 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64841:  48372* 
1/5/6 A 129.186.0.0 (276)
05:31:54.929623 bb.cc.iastate.edu.64840 > kerberos-1.iastate.edu.kerberos:  v5
05:31:54.959043 arp who-has bb.cc.iastate.edu tell kerberos-1.iastate.edu
05:31:54.959062 arp reply bb.cc.iastate.edu is-at 0:90:27:dc:5e:30
05:31:54.960320 kerberos-1.iastate.edu.kerberos > bb.cc.iastate.edu.64840:  v5
05:31:55.140486 bb.cc.iastate.edu.64839 > ns-1.iastate.edu.domain:  17239+ PTR? 
200.1.186.129.in-addr.arpa. (44)
05:31:55.144248 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64839:  17239* 
1/5/6 (298)
05:31:55.145038 bb.cc.iastate.edu.64838 > ns-1.iastate.edu.domain:  17240+ PTR? 
201.140.186.129.in-addr.arpa. (46)
05:31:55.150062 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64838:  17240* 
1/5/6 (311)

tcpdump of doing kinit -4 gendalia:

05:33:06.828395 bb.cc.iastate.edu.64835 > ns-1.iastate.edu.domain:  60459+ SRV 
? _kerberos._udp.IASTATE.EDU. (44)
05:33:06.831322 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64835:  60459 2/1/2 
(196)
05:33:06.831649 bb.cc.iastate.edu.64834 > ns-1.iastate.edu.domain:  60460+ SRV 
? _kerberos._tcp.IASTATE.EDU. (44)
05:33:06.835368 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64834:  60460 2/1/2 
(196)
05:33:06.835533 bb.cc.iastate.edu.64833 > ns-1.iastate.edu.domain:  60461+ SRV 
? _kerberos._http.IASTATE.EDU. (45)
05:33:06.837652 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64833:  60461 
NXDomain* 0/1/0 (101)
05:33:06.838321 bb.cc.iastate.edu.64832 > ns-1.iastate.edu.domain:  60462+ 
AAAA? kerberos-1.iastate.edu. (40)
05:33:06.841294 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64832:  60462* 
0/1/0 (96)
05:33:06.841390 bb.cc.iastate.edu.64831 > ns-1.iastate.edu.domain:  60463+ A? 
kerberos-1.iastate.edu. (40)
05:33:06.845174 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64831:  60463* 
1/5/6 A 129.186.0.0 (276)
05:33:06.845311 bb.cc.iastate.edu.64830 > kerberos-1.iastate.edu.kerberos:  v5
05:33:06.860808 kerberos-1.iastate.edu.kerberos > bb.cc.iastate.edu.64830:  v5
05:33:06.862702 bb.cc.iastate.edu.64829 > ns-1.iastate.edu.domain:  60464+ SRV 
? _kerberos._udp.IASTATE.EDU. (44)
05:33:06.865530 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64829:  60464 2/1/2 
(196)
05:33:06.865710 bb.cc.iastate.edu.64828 > ns-1.iastate.edu.domain:  60465+ SRV 
? _kerberos._tcp.IASTATE.EDU. (44)
05:33:06.868550 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64828:  60465 2/1/2 
(196)
05:33:06.868714 bb.cc.iastate.edu.64827 > ns-1.iastate.edu.domain:  60466+ SRV 
? _kerberos._http.IASTATE.EDU. (45)
05:33:06.871457 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64827:  60466 
NXDomain* 0/1/0 (101)
05:33:06.871674 bb.cc.iastate.edu.64826 > ns-1.iastate.edu.domain:  60467+ 
AAAA? kerberos-1.iastate.edu. (40)
05:33:06.874426 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64826:  60467* 
0/1/0 (96)
05:33:06.874514 bb.cc.iastate.edu.64825 > ns-1.iastate.edu.domain:  60468+ A? 
kerberos-1.iastate.edu. (40)
05:33:06.878457 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64825:  60468* 
1/5/6 A 129.186.0.0 (276)
05:33:06.878567 bb.cc.iastate.edu.64824 > kerberos-1.iastate.edu.kerberos: 
05:33:07.690568 bb.cc.iastate.edu.64823 > ns-1.iastate.edu.domain:  13066+ PTR? 
200.1.186.129.in-addr.arpa. (44)
05:33:07.694064 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64823:  13066* 
1/5/6 (298)
05:33:07.694876 bb.cc.iastate.edu.64822 > ns-1.iastate.edu.domain:  13067+ PTR? 
201.140.186.129.in-addr.arpa. (46)
05:33:07.698490 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64822:  13067* 
1/5/6 (311)
05:33:09.880229 bb.cc.iastate.edu.64821 > ns-1.iastate.edu.domain:  60469+ 
AAAA? kerberos-2.iastate.edu. (40)
05:33:09.882329 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64821:  60469* 
0/1/0 (96)
05:33:09.882423 bb.cc.iastate.edu.64820 > ns-1.iastate.edu.domain:  60470+ A? 
kerberos-2.iastate.edu. (40)
05:33:09.886047 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64820:  60470* 
1/5/6 A e63gb1-lo0.tele.iastate.edu (276)
05:33:09.886163 bb.cc.iastate.edu.64819 > kerberos-2.iastate.edu.kerberos: 
05:33:10.690397 bb.cc.iastate.edu.64818 > ns-1.iastate.edu.domain:  13068+ PTR? 
33.0.186.129.in-addr.arpa. (43)
05:33:10.694029 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64818:  13068* 
1/5/6 (313)
05:33:10.694304 bb.cc.iastate.edu.64817 > ns-1.iastate.edu.domain:  13069+ PTR? 
152.78.186.129.in-addr.arpa. (45)
05:33:10.697868 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64817:  13069* 
1/5/6 (310)
05:33:12.890237 bb.cc.iastate.edu.64816 > ns-1.iastate.edu.domain:  60471+ 
AAAA? windc1.iastate.edu. (36)
05:33:12.892519 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64816:  60471* 
0/1/0 (92)
05:33:12.892607 bb.cc.iastate.edu.64815 > ns-1.iastate.edu.domain:  60472+ A? 
windc1.iastate.edu. (36)
05:33:12.896073 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64815:  60472* 
1/5/6 A windc1.iastate.edu (272)
05:33:12.896183 bb.cc.iastate.edu.64814 > windc1.iastate.edu.kerberos: 
05:33:12.897057 bb.cc.iastate.edu.64814 > windc1.iastate.edu.kerberos: 
05:33:13.690339 bb.cc.iastate.edu.64813 > ns-1.iastate.edu.domain:  13070+ PTR? 
1.6.186.129.in-addr.arpa. (42)
05:33:13.694050 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64813:  13070* 
1/5/6 PTR  (303)
05:33:15.900195 bb.cc.iastate.edu.64812 > ns-1.iastate.edu.domain:  60473+ 
AAAA? windc2.iastate.edu. (36)
05:33:15.902556 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64812:  60473* 
0/1/0 (92)
05:33:15.902643 bb.cc.iastate.edu.64811 > ns-1.iastate.edu.domain:  60474+ A? 
windc2.iastate.edu. (36)
05:33:15.906247 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64811:  60474* 
1/5/6 A windc2.iastate.edu (272)
05:33:15.906353 bb.cc.iastate.edu.64810 > windc2.iastate.edu.kerberos: 
05:33:16.690332 bb.cc.iastate.edu.64809 > ns-1.iastate.edu.domain:  13071+ PTR? 
2.6.186.129.in-addr.arpa. (42)
05:33:16.693851 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64809:  13071* 
1/5/6 PTR  (303)
05:33:18.910191 bb.cc.iastate.edu.64808 > ns-1.iastate.edu.domain:  60475+ 
AAAA? windc2.iastate.edu. (36)
05:33:18.914226 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64808:  60475* 
0/1/0 (92)
05:33:18.914313 bb.cc.iastate.edu.64807 > ns-1.iastate.edu.domain:  60476+ A? 
windc2.iastate.edu. (36)
05:33:18.917865 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64807:  60476* 
1/5/6 A windc2.iastate.edu (272)
05:33:18.918047 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: S 
3509810037:3509810037(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104838 0>
05:33:18.918685 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: S 
270552141:270552141(0) ack 3509810038 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:18.918726 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104838 0>
05:33:18.918800 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104838 0>
05:33:19.086725 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: . ack 5 
win 17516 <nop,nop,timestamp 37718369 104838> (DF)
05:33:19.086760 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104838 0>
05:33:19.088833 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 37718369 104838> (DF)
05:33:19.170030 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104839 37718369>
05:33:22.090040 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104844 37718369>
05:33:22.090231 bb.cc.iastate.edu.64806 > ns-1.iastate.edu.domain:  60477+ 
AAAA? windc1.iastate.edu. (36)
05:33:22.091023 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: . ack 
306 win 17216 <nop,nop,timestamp 37718398 104844> (DF)
05:33:22.091093 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 37718398 104844> (DF)
05:33:22.091123 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104844 37718398>
05:33:22.092453 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64806:  60477* 
0/1/0 (92)
05:33:22.092542 bb.cc.iastate.edu.64805 > ns-1.iastate.edu.domain:  60478+ A? 
windc1.iastate.edu. (36)
05:33:22.095987 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64805:  60478* 
1/5/6 A windc1.iastate.edu (272)
05:33:22.096138 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: S 
3626852537:3626852537(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104844 0>
05:33:22.096500 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: S 
3626852537:3626852537(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104844 0>
05:33:22.096680 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: S 
3064510200:3064510200(0) ack 3626852538 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:22.096949 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: S 
3064510200:3064510200(0) ack 3626852538 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:22.096979 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097023 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097320 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097560 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.259407 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 5 
win 17516 <nop,nop,timestamp 6797957 104844> (DF)
05:33:22.259648 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 5 
win 17516 <nop,nop,timestamp 6797957 104844> (DF)
05:33:22.259680 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104845 0>
05:33:22.260605 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104845 0>
05:33:22.261861 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6797957 104845> (DF)
05:33:22.262118 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6797957 104845> (DF)
05:33:22.370020 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104845 6797957>
05:33:22.370365 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104845 6797957>
05:33:25.270038 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104851 6797957>
05:33:25.270218 bb.cc.iastate.edu.64804 > ns-1.iastate.edu.domain:  60479+ 
AAAA? kerberos-1.iastate.edu. (40)
05:33:25.270444 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104851 6797957>
05:33:25.270589 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 
306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.270757 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.270831 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 
306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.271010 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.271037 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104851 6797986>
05:33:25.271370 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104851 6797986>
05:33:25.272774 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64804:  60479* 
0/1/0 (96)
05:33:25.272864 bb.cc.iastate.edu.64803 > ns-1.iastate.edu.domain:  60480+ A? 
kerberos-1.iastate.edu. (40)
05:33:25.276787 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64803:  60480* 
1/5/6 A 129.186.0.52 (276)
05:33:25.276895 bb.cc.iastate.edu.64802 > kerberos-1.iastate.edu.kerberos: 
05:33:25.690713 bb.cc.iastate.edu.64801 > ns-1.iastate.edu.domain:  13072+ PTR? 
52.0.186.129.in-addr.arpa. (43)
05:33:25.692918 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64801:  13072 
NXDomain* 0/1/0 (119)
05:33:28.280189 bb.cc.iastate.edu.64800 > ns-1.iastate.edu.domain:  60481+ 
AAAA? kerberos-2.iastate.edu. (40)
05:33:28.282677 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64800:  60481* 
0/1/0 (96)
05:33:28.282767 bb.cc.iastate.edu.64799 > ns-1.iastate.edu.domain:  60482+ A? 
kerberos-2.iastate.edu. (40)
05:33:28.286593 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64799:  60482* 
1/5/6 A oak-186-162.stures.iastate.edu (276)
05:33:28.286700 bb.cc.iastate.edu.64798 > kerberos-2.iastate.edu.kerberos: 
05:33:28.690333 bb.cc.iastate.edu.64797 > ns-1.iastate.edu.domain:  13073+ PTR? 
162.186.186.129.in-addr.arpa. (46)
05:33:28.693985 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64797:  13073* 
1/5/6 (319)
05:33:31.290185 bb.cc.iastate.edu.64796 > ns-1.iastate.edu.domain:  60483+ 
AAAA? windc1.iastate.edu. (36)
05:33:31.292428 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64796:  60483* 
0/1/0 (92)
05:33:31.292516 bb.cc.iastate.edu.64795 > ns-1.iastate.edu.domain:  60484+ A? 
windc1.iastate.edu. (36)
05:33:31.296057 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64795:  60484* 
1/5/6 A windc1.iastate.edu (272)
05:33:31.296162 bb.cc.iastate.edu.64794 > windc1.iastate.edu.kerberos: 
05:33:31.297022 bb.cc.iastate.edu.64794 > windc1.iastate.edu.kerberos: 
05:33:34.300187 bb.cc.iastate.edu.64793 > ns-1.iastate.edu.domain:  60485+ 
AAAA? windc2.iastate.edu. (36)
05:33:34.302418 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64793:  60485* 
0/1/0 (92)
05:33:34.302505 bb.cc.iastate.edu.64792 > ns-1.iastate.edu.domain:  60486+ A? 
windc2.iastate.edu. (36)
05:33:34.306050 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64792:  60486* 
1/5/6 A windc2.iastate.edu (272)
05:33:34.306155 bb.cc.iastate.edu.64791 > windc2.iastate.edu.kerberos: 
05:33:37.310182 bb.cc.iastate.edu.64790 > ns-1.iastate.edu.domain:  60487+ 
AAAA? windc2.iastate.edu. (36)
05:33:37.312348 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64790:  60487* 
0/1/0 (92)
05:33:37.312434 bb.cc.iastate.edu.64789 > ns-1.iastate.edu.domain:  60488+ A? 
windc2.iastate.edu. (36)
05:33:37.315906 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64789:  60488* 
1/5/6 A windc2.iastate.edu (272)
05:33:37.316057 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: S 
4175282825:4175282825(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104875 0>
05:33:37.316730 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: S 
274856427:274856427(0) ack 4175282826 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:37.316764 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104875 0>
05:33:37.316806 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104875 0>
05:33:37.460634 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: . ack 5 
win 17516 <nop,nop,timestamp 37718552 104875> (DF)
05:33:37.460667 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104875 0>
05:33:37.462733 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 37718552 104875> (DF)
05:33:37.570019 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104875 37718552>
05:33:40.470064 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104881 37718552>
05:33:40.470344 bb.cc.iastate.edu.64788 > ns-1.iastate.edu.domain:  60489+ 
AAAA? windc1.iastate.edu. (36)
05:33:40.470792 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: . ack 
306 win 17216 <nop,nop,timestamp 37718582 104881> (DF)
05:33:40.470945 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 37718582 104881> (DF)
05:33:40.470976 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104881 37718582>
05:33:40.472657 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64788:  60489* 
0/1/0 (92)
05:33:40.472762 bb.cc.iastate.edu.64787 > ns-1.iastate.edu.domain:  60490+ A? 
windc1.iastate.edu. (36)
05:33:40.476896 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64787:  60490* 
1/5/6 A windc1.iastate.edu (272)
05:33:40.477071 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: S 
4291783628:4291783628(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104881 0>
05:33:40.477478 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: S 
4291783628:4291783628(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104881 0>
05:33:40.477668 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: S 
3068882161:3068882161(0) ack 4291783629 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:40.477937 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: S 
3068882161:3068882161(0) ack 4291783629 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:40.477968 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478017 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478335 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478421 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.633175 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 5 
win 17516 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.633417 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 5 
win 17516 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.633452 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.634357 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.635621 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.635891 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.770025 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104882 6798140>
05:33:40.770357 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104882 6798140>
05:33:43.640050 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104887 6798140>
05:33:43.640276 bb.cc.iastate.edu.64786 > ns-1.iastate.edu.domain:  60491+ 
AAAA? kerberos-1.iastate.edu. (40)
05:33:43.640466 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104887 6798140>
05:33:43.640607 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 
306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640768 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640869 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 
306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640997 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.641025 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104887 6798170>
05:33:43.641389 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104887 6798170>
05:33:43.642634 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64786:  60491* 
0/1/0 (96)
05:33:43.642734 bb.cc.iastate.edu.64785 > ns-1.iastate.edu.domain:  60492+ A? 
kerberos-1.iastate.edu. (40)
05:33:43.646306 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64785:  60492* 
1/5/6 A himagiri.cs.iastate.edu (276)
05:33:43.646416 bb.cc.iastate.edu.64784 > kerberos-1.iastate.edu.kerberos: 
05:33:43.690778 bb.cc.iastate.edu.64783 > ns-1.iastate.edu.domain:  13074+ PTR? 
112.68.186.129.in-addr.arpa. (45)
05:33:43.694091 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64783:  13074* 
1/4/4 (247)
05:33:46.650190 bb.cc.iastate.edu.64782 > ns-1.iastate.edu.domain:  60493+ 
AAAA? kerberos-2.iastate.edu. (40)
05:33:46.652465 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64782:  60493* 
0/1/0 (96)
05:33:46.652553 bb.cc.iastate.edu.64781 > ns-1.iastate.edu.domain:  60494+ A? 
kerberos-2.iastate.edu. (40)
05:33:46.656137 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64781:  60494* 
1/5/6 A larch-187-90.stures.iastate.edu (276)
05:33:46.656245 bb.cc.iastate.edu.64780 > kerberos-2.iastate.edu.kerberos: 
05:33:46.690354 bb.cc.iastate.edu.64779 > ns-1.iastate.edu.domain:  13075+ PTR? 
90.187.186.129.in-addr.arpa. (45)
05:33:46.694179 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64779:  13075* 
1/5/6 (319)
05:33:49.660187 bb.cc.iastate.edu.64778 > ns-1.iastate.edu.domain:  60495+ 
AAAA? windc1.iastate.edu. (36)
05:33:49.662936 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64778:  60495* 
0/1/0 (92)
05:33:49.663023 bb.cc.iastate.edu.64777 > ns-1.iastate.edu.domain:  60496+ A? 
windc1.iastate.edu. (36)
05:33:49.666547 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64777:  60496* 
1/5/6 A windc1.iastate.edu (272)
05:33:49.666654 bb.cc.iastate.edu.64776 > windc1.iastate.edu.kerberos: 
05:33:49.667545 bb.cc.iastate.edu.64776 > windc1.iastate.edu.kerberos: 
05:33:52.670190 bb.cc.iastate.edu.64775 > ns-1.iastate.edu.domain:  60497+ 
AAAA? windc2.iastate.edu. (36)
05:33:52.672368 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64775:  60497* 
0/1/0 (92)
05:33:52.672455 bb.cc.iastate.edu.64774 > ns-1.iastate.edu.domain:  60498+ A? 
windc2.iastate.edu. (36)
05:33:52.675939 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64774:  60498* 
1/5/6 A windc2.iastate.edu (272)
05:33:52.676043 bb.cc.iastate.edu.64773 > windc2.iastate.edu.kerberos: 
05:33:55.680466 bb.cc.iastate.edu.64772 > ns-1.iastate.edu.domain:  60499+ 
AAAA? windc2.iastate.edu. (36)
05:33:55.682620 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64772:  60499* 
0/1/0 (92)
05:33:55.682707 bb.cc.iastate.edu.64771 > ns-1.iastate.edu.domain:  60500+ A? 
windc2.iastate.edu. (36)
05:33:55.686191 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64771:  60500* 
1/5/6 A windc2.iastate.edu (272)
05:33:55.686353 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: S 
525274633:525274633(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104912 0>
05:33:55.687017 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: S 
279202746:279202746(0) ack 525274634 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:55.687049 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104912 0>
05:33:55.687095 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104912 0>
05:33:55.834527 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: . ack 5 
win 17516 <nop,nop,timestamp 37718736 104912> (DF)
05:33:55.834562 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104912 0>
05:33:55.836637 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 37718736 104912> (DF)
05:33:55.970018 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104912 37718736>
05:33:58.840035 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104918 37718736>
05:33:58.840213 bb.cc.iastate.edu.64770 > ns-1.iastate.edu.domain:  60501+ 
AAAA? windc1.iastate.edu. (36)
05:33:58.840672 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: . ack 
306 win 17216 <nop,nop,timestamp 37718766 104918> (DF)
05:33:58.840831 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 37718766 104918> (DF)
05:33:58.840859 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104918 37718766>
05:33:58.842314 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64770:  60501* 
0/1/0 (92)
05:33:58.842404 bb.cc.iastate.edu.64769 > ns-1.iastate.edu.domain:  60502+ A? 
windc1.iastate.edu. (36)
05:33:58.846308 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64769:  60502* 
1/5/6 A windc1.iastate.edu (272)
05:33:58.846456 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: S 
646900403:646900403(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104918 0>
05:33:58.846827 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: S 
646900403:646900403(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 
104918 0>
05:33:58.847002 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: S 
3073424143:3073424143(0) ack 646900404 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:58.847255 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: S 
3073424143:3073424143(0) ack 646900404 win 17520 <mss 1460,nop,wscale 
0,nop,nop,timestamp 0 0> (DF)
05:33:58.847284 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847327 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847661 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 1 
win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847733 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 1:5(4) 
ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.006922 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 5 
win 17516 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.007180 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 5 
win 17516 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.007212 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.008118 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 
5:305(300) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.009380 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.009643 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: P 1:5(4) 
ack 305 win 17216 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.170034 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104919 6798324>
05:33:59.170387 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 5 
win 17520 <nop,nop,timestamp 104919 6798324>
05:34:02.010041 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104924 6798324>
05:34:02.010400 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: F 
305:305(0) ack 5 win 17520 <nop,nop,timestamp 104924 6798324>
05:34:02.010543 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 
306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010694 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010785 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 
306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010945 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: F 5:5(0) 
ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010980 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104924 6798354>
05:34:02.011337 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 6 
win 17520 <nop,nop,timestamp 104924 6798354>
Follow-Ups:
- Re: kerberosV with kerberosIV compatibility
  - From: Love
References:
- Re: kerberosV with kerberosIV compatibility
  - From: Love
Prev by Date: Re: kerberosV with kerberosIV compatibility
Next by Date: Re: kerberosV with kerberosIV compatibility
Previous by Thread: Re: kerberosV with kerberosIV compatibility
Next by Thread: Re: kerberosV with kerberosIV compatibility
Indexes:
Home | Main Index | Thread Index | Old Index