Re: Heimdal KDC 1.5.1 as AFS KA-server
Andreas Haupt <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | DESY |
| Message-ID | <[email protected]> |
Hi Love, On Wed, 2011-10-12 at 10:19 +0000, Love Hörnquist Åstrand wrote: > 12 okt 2011 kl. 10:33 skrev Andreas Haupt: > > > I wanted to update our KDC infrastructure from version 1.2.1 to > > 1.5.1. > > But this doesn't work as the KDCs in this version don't act as AFS > > KA-server any more. Is there anything I missed? > > > > I looked at the code of version 1.3.1, 1.4 and 1.5.1 - and it looks > > like > > the code supporting this has been removed in 1.5! Is this true? > > Where > > has this been documented? > > > KA is kerberos 4, so it got dropped with krb4 was dropped. Ah, ok thanks. I was somehow irritated by the several information sources stating different things (as e.g. http://www.h5l.org/manual/heimdal-1-5-branch/info/heimdal/kaserver.html#kaserver ) On the other hand I'm surprised that the KDC still listens on port 750 (plain krb4): [remus] /root # netstat -lunp | grep kdc udp 0 0 141.34.22.11:88 0.0.0.0:* 29461/kdc udp 0 0 127.0.0.1:88 0.0.0.0:* 29461/kdc udp 0 0 141.34.22.11:750 0.0.0.0:* 29461/kdc udp 0 0 127.0.0.1:750 0.0.0.0:* 29461/kdc Hasn't krb4 support dropped completely? Cheers, Andreas -- | Andreas Haupt | E-Mail: [email protected] | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/~ahaupt | Platanenallee 6 | Phone: +49/33762/7-7359 | D-15738 Zeuthen | Fax: +49/33762/7-7216