[SAMBA4] In Memory ccache doesn't work

Stefan (metze) Metzmacher metze at samba.org
Sat Dec 9 14:14:53 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I just noticed that we always do the following before a
krb5 authentification.

AS-REQ without pre-auth krbtgt/REALM
AS-REP error_code: KRB5KDC_ERR_PREAUTH_REQUIRED (25)
AS-REQ with pre-auth krbtgt/REALM
AS-REQ fine
TGS-REQ for target principal
TGS-REP fine
TGS-REQ KDCOptions: 60000000 (Forwardable, Forwarded) for krbtgt/REALM
TGS-REP error_code: KRB5KDC_ERR_BADOPTION (13)

against a w2k3 kdc, where windows only do

AS-REQ with pre-auth krbtgt/REALM
AS-REQ fine
TGS-REQ for target principal
TGS-REP fine

Also I noticed that the in memory ccache attached to the
cli_credentitials struct doesn't work, as we do the above for every
authentification!

Love, Andrew: any ideas?

metze
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFFesTcm70gjA5TCD8RAqB6AKCx234NUf9bM/9sfMLJBR5y7zNXYwCgpWB9
YbdCzMxmRnhx0zPiLs5u3KE=
=+Hno
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list