Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 68528 invoked from network); 30 Oct 2007 09:28:07 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 30 Oct 2007 09:28:07 -0000 Received: (qmail 56559 invoked by uid 500); 30 Oct 2007 09:27:54 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 56527 invoked by uid 500); 30 Oct 2007 09:27:54 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 56516 invoked by uid 99); 30 Oct 2007 09:27:54 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Oct 2007 02:27:54 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of liyilei1979@gmail.com designates 209.85.134.191 as permitted sender) Received: from [209.85.134.191] (HELO mu-out-0910.google.com) (209.85.134.191) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Oct 2007 09:27:58 +0000 Received: by mu-out-0910.google.com with SMTP id i2so2458159mue for ; Tue, 30 Oct 2007 02:27:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=xQYzWfJ8UZPkLl/i8IrnmaE7yyOUfQ+H4XJx7V92ca0=; b=QEQDJoIYltiK8oQYrErc76NRUrZtRjiJXJtzRuU2jVvf7RSl3u9U7iYAdbjMsgmsrDlG/4DpyQjN78py8dw0p1OOj7q5ga1HAlvQZjF4gGMURvUaquwpfgJQFxcnlnS0uO8QWxTzEzQfXVnm9M1xuBcM9ojGu9A7phiX8Wq0pj0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=uLq7nXW8mwbVbZUKEwrCZ9cXsrRrrItySS1B9xsKt2Pw6Dvap2vxTA3H2lLlU5IbyFFOEJpTv8zScmZMkoBMWTVfqqDJlnfQxamfpJJygvX4R8eHfMu8sKS5aYLJbOnx2mPQLTtIVYLDVZM0HCS2CXg0Gi8V8vHL0T9Rsb5qCyk= Received: by 10.82.162.14 with SMTP id k14mr13395293bue.1193736445542; Tue, 30 Oct 2007 02:27:25 -0700 (PDT) Received: by 10.82.159.3 with HTTP; Tue, 30 Oct 2007 02:27:25 -0700 (PDT) Message-ID: Date: Tue, 30 Oct 2007 17:27:25 +0800 From: "Leo Li" To: "Apache Directory Developers List" , erodriguez@apache.org Subject: Re: [kerberos client]Problem to obtain TGT from KDC. In-Reply-To: <568753d90710282054m383951bhca73523b7058c84c@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <568753d90710241230s712af185k53fb83431f953779@mail.gmail.com> <568753d90710282054m383951bhca73523b7058c84c@mail.gmail.com> X-Virus-Checked: Checked by ClamAV on apache.org On 10/29/07, Enrique Rodriguez wrote: > On 10/25/07, Leo Li wrote: > > ... > > Besides, the successful kinit has such log for REQ: > > AS_REQ (7 etypes {18 17 16 23 1 3 2}). It has the "7" type > > for REQ than "1" type. Does it make some difference? > > Can somebody help? > > Hi, Leo, > > I need to fire up MIT Kerberos to try to reproduce this. The ApacheDS > Kerberos client component has only been tested against ApacheDS > itself, so it's entirely possible we have an interop problem. Our > client is pre-alpha. Let me get back to you. > Thanks, Enrique. I found it is not the problem with apache ds's kerberos client but in fact the KDC I used: all other encrypt types can work except des-cbc-md5. :) So could you tell me what is the "long form of the ApacheDS Kerberos client component" which can specify the encrypt type? Thanks, Leo. > Enrique > -- Leo Li China Software Development Lab, IBM