latest

Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 7 Days 9 Hours ago by: Ken Hornstein Thank you; I for one appreciate your apology. Weeeelll ... I was curious and I re-read that thread, and it sure seems like the problem was kind of Postgres-specific, in that: Postgres on Windows is compiled with both SSPI and GSSAPI supp
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 7 Days 11 Hours ago by: Tomas Pospisek I have to apologize to everyone here and thank you and Sam for your feedback: the tone of my original message was an edge to sharp. I should have had my frustration under control that my asking a lowly question gets no reply on a maili
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 7 Days 11 Hours ago by: Tomas Pospisek Sorry for the delay and thanks a lot for your reply Sam. See also my followup to Ken Hornstein's answer. *t
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 14 Days 23 Hours ago by: Stephen Frost --Dxr4zdFwVBAFqptR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Greetings, * Tomas Pospisek (tpo2@sourcepole.ch) wrote: Yes, you're welcome. This list can be quite valuable but, just like the PG lists, people
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 17 Days 5 Hours ago by: Ken Hornstein Dude, I can't speak for anyone else, but I didn't know the answer (and it involved Windows, which I am not that familiar with), _and_ my day job does not pay me to support people on the MIT Kerberos mailing list. That's not to say I'm opp
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 17 Days 6 Hours ago by: Sam Hartman Tomas> Also, since I got precisely zilch feedback here while there Tomas> were other postings here I'm under the impression that this Tomas> is a mailing list with no user support (but instead a Tomas> development list o
Re: kerberos client on windows not being able to access credentials comp.protocols.kerberos Posted: 17 Days 7 Hours ago by: Tomas Pospisek Hello, In case anybody is interested (or as a reference for future readers): I was able to resolve the problem. See https://www.postgresql.org/message-id/08b836a7-272a-2309-da45-ac691fccacb8%40sourcepole.ch for details. Also, since I
Configuring Referrals in AD comp.protocols.kerberos Posted: 20 Days 3 Hours ago by: hbhotz@oxy.edu I know I saw something about this in some set of release notes for some version of Windows. How do I install the equivalent of the [domain_realm] section into ADs Kerberos? I have a working cross-realm trust. user@AD can get HOST/machine
Re: appl/simple/client/sim_client.c uses internal APIs comp.protocols.kerberos Posted: 21 Days 11 Hours ago by: Florian Weimer Thank you for your help regarding this matter. In the end, I could not fix the Authen::Krb5 Perl module because there are some fundamental reference counting problems in it. The code sort-of works today because it papers over these issues
Re: appl/simple/client/sim_client.c uses internal APIs comp.protocols.kerberos Posted: 27 Days 19 Hours ago by: Greg Hudson Done: https://github.com/krb5/krb5/commit/9139a60c94c24e41109574e84e7cda9c2dc3fb38 If possible, the Perl client code should be changed to use AP_OPTS_USE_SUBKEY, in addition to removing the replay cache calls.
Re: appl/simple/client/sim_client.c uses internal APIs comp.protocols.kerberos Posted: 27 Days 19 Hours ago by: Nico Williams We try never to have multiple layers of negotiation of mechanisms. In the case of HTTP, sadly, we do have that via Negotiate [RFC 4559]. Now, Negotiate is Informational, and if Microsoft had created Negotiate via the normal IETF process
Re: appl/simple/client/sim_client.c uses internal APIs comp.protocols.kerberos Posted: 1 Month ago by: Russ Allbery Argh, sorry, I got this backwards, and I think this is the same mistake that I have made before. For some reason it is stuck in my head that SPNEGO is used to negotiate GSSAPI when it's the other way around: SPNEGO is a GSSAPI mechanis
Re: appl/simple/client/sim_client.c uses internal APIs comp.protocols.kerberos Posted: 1 Month ago by: Simo Sorce Sorry Russ, I do not know about toys or science experiments, but I have been using GSSAPI in real HTTP applications to do either NTLM or Krb5 just fine. And before that in SMB applications (although Samba is more complicated because of it

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 7 Days 9 Hours ago by: Ken Hornstein

Thank you; I for one appreciate your apology. Weeeelll ... I was curious and I re-read that thread, and it sure seems like the problem was kind of Postgres-specific, in that: Postgres on Windows is compiled with both SSPI and GSSAPI supp

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 7 Days 11 Hours ago by: Tomas Pospisek

I have to apologize to everyone here and thank you and Sam for your feedback: the tone of my original message was an edge to sharp. I should have had my frustration under control that my asking a lowly question gets no reply on a maili

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 7 Days 11 Hours ago by: Tomas Pospisek

Sorry for the delay and thanks a lot for your reply Sam. See also my followup to Ken Hornstein's answer. *t

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 14 Days 23 Hours ago by: Stephen Frost

--Dxr4zdFwVBAFqptR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Greetings, * Tomas Pospisek (tpo2@sourcepole.ch) wrote: Yes, you're welcome. This list can be quite valuable but, just like the PG lists, people

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 17 Days 5 Hours ago by: Ken Hornstein

Dude, I can't speak for anyone else, but I didn't know the answer (and it involved Windows, which I am not that familiar with), _and_ my day job does not pay me to support people on the MIT Kerberos mailing list. That's not to say I'm opp

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 17 Days 6 Hours ago by: Sam Hartman

Tomas> Also, since I got precisely zilch feedback here while there Tomas> were other postings here I'm under the impression that this Tomas> is a mailing list with *no* user support (but instead a Tomas> development list o

Re: kerberos client on windows not being able to access credentials

comp.protocols.kerberos

Posted: 17 Days 7 Hours ago by: Tomas Pospisek

Hello, In case anybody is interested (or as a reference for future readers): I was able to resolve the problem. See https://www.postgresql.org/message-id/08b836a7-272a-2309-da45-ac691fccacb8%40sourcepole.ch for details. Also, since I

Configuring Referrals in AD

comp.protocols.kerberos

Posted: 20 Days 3 Hours ago by: hbhotz@oxy.edu

I know I saw something about this in some set of release notes for some version of Windows. How do I install the equivalent of the [domain_realm] section into ADs Kerberos? I have a working cross-realm trust. user@AD can get HOST/machine

Re: appl/simple/client/sim_client.c uses internal APIs

comp.protocols.kerberos

Posted: 21 Days 11 Hours ago by: Florian Weimer

Thank you for your help regarding this matter. In the end, I could not fix the Authen::Krb5 Perl module because there are some fundamental reference counting problems in it. The code sort-of works today because it papers over these issues

Re: appl/simple/client/sim_client.c uses internal APIs

comp.protocols.kerberos

Posted: 27 Days 19 Hours ago by: Greg Hudson

Done: https://github.com/krb5/krb5/commit/9139a60c94c24e41109574e84e7cda9c2dc3fb38 If possible, the Perl client code should be changed to use AP_OPTS_USE_SUBKEY, in addition to removing the replay cache calls.

Re: appl/simple/client/sim_client.c uses internal APIs

comp.protocols.kerberos

Posted: 27 Days 19 Hours ago by: Nico Williams

We try never to have multiple layers of negotiation of mechanisms. In the case of HTTP, sadly, we do have that via Negotiate [RFC 4559]. Now, Negotiate is Informational, and if Microsoft had created Negotiate via the normal IETF process

Re: appl/simple/client/sim_client.c uses internal APIs

comp.protocols.kerberos

Posted: 1 Month ago by: Russ Allbery

Argh, sorry, I got this backwards, and I think this is the same mistake that I have made before. For some reason it is stuck in my head that SPNEGO is used to negotiate GSSAPI when it's the other way around: SPNEGO is a GSSAPI mechanis

Re: appl/simple/client/sim_client.c uses internal APIs

comp.protocols.kerberos

Posted: 1 Month ago by: Simo Sorce

Sorry Russ, I do not know about toys or science experiments, but I have been using GSSAPI in real HTTP applications to do either NTLM or Krb5 just fine. And before that in SMB applications (although Samba is more complicated because of it

13 recent articles found.

rocksolid light 0.7.2
clearnet i2p tor