Re: Heimdal KDC 1.5.1 as AFS KA-server

12 okt 2011 kl. 12:33 skrev Andreas Haupt:

> Hi Love,
> 
> On Wed, 2011-10-12 at 10:19 +0000, Love Hörnquist Åstrand wrote:
>> 12 okt 2011 kl. 10:33 skrev Andreas Haupt:
>> 
>>> I wanted to update our KDC infrastructure from version 1.2.1 to
>>> 1.5.1.
>>> But this doesn't work as the KDCs in this version don't act as AFS
>>> KA-server any more. Is there anything I missed?
>>> 
>>> I looked at the code of version 1.3.1, 1.4 and 1.5.1 - and it looks
>>> like
>>> the code supporting this has been removed in 1.5! Is this true?
>>> Where
>>> has this been documented? 
>> 
>> 
>> KA is kerberos 4, so it got dropped with krb4 was dropped.
> 
> Ah, ok thanks. I was somehow irritated by the several information
> sources stating different things (as e.g.
> http://www.h5l.org/manual/heimdal-1-5-branch/info/heimdal/kaserver.html#kaserver )

Thanks, just updated that, the manual page will be rebuilt soon.

> On the other hand I'm surprised that the KDC still listens on port 750
> (plain krb4):
> 
> [remus] /root # netstat -lunp | grep kdc
> udp        0      0 141.34.22.11:88             0.0.0.0:*                               29461/kdc           
> udp        0      0 127.0.0.1:88                0.0.0.0:*                               29461/kdc           
> udp        0      0 141.34.22.11:750            0.0.0.0:*                               29461/kdc           
> udp        0      0 127.0.0.1:750               0.0.0.0:*                               29461/kdc           
> 
> Hasn't krb4 support dropped completely?

Old old windows clients talk kerberos5 on port 750 since that is what msft /etc/services told them to do.

Love