Subject: Re: NetBSD 1.5 vs. Kerberos v4
To: None <thorpej@zembu.com>
From: Love <lha@stacken.kth.se>
List: current-users
Date: 01/21/2001 09:38:02
Jason R Thorpe <thorpej@zembu.com> writes:

> On Fri, Jan 19, 2001 at 01:36:16PM -0600, Tracy J. Di Marco White wrote:
> 
>  > I have _tried_, but the only way I've found to do K4 on 1.5 involves
>  > installing the kth-krb4 package in pkgsrc then playing with paths.
>  > I'm not sure what I'm missing, as I think it should work.
> 
> Well, NetBSD 1.5 includes KTH-KRB4, and it is compiled in to e.g.
> telnet(1).  But the problem is that kinit(1) queries a KRB5 server,
> and kinit -4 queries a 524 server.

When kinit get backs a 'wrong version' on the kerberos 5 request from the
kerberos 4 server, it sends a kerberos 4 request. See (current, but I don't
think this have changed) /usr/src/crypto/dist/heimdal/kuser/kinit.c:514

Love

: lha@nutcracker ; /usr/bin/kinit lha@FOO.SE
lha@FOO.SE's Password: 
: lha@nutcracker ; klist
klist: No ticket file: /tmp/krb5cc_00613a

v4-ticket file: /tmp/tkt_00613b
Principal:      lha@FOO.SE

  Issued           Expires          Principal               
Jan 21 09:33:26  Jan 21 19:33:26  krbtgt.FOO.SE@FOO.SE
Jan 21 09:33:07  Jan 21 19:33:07  lha@FOO.SE