Klog w/ IBM AFS 3.5p5

Robert P Ricci ricci at eng.utah.edu
Tue Sep 26 00:21:15 CEST 2000


Thus spake Love on Sat, Sep 23, 2000 at 03:04:54PM +0200:
> I assume that you use a kaserver. I should start read the release notes
> (our sitecontacts haven't downloaded it so I can't help you).

This section from the README seems like the most likely culprit:

* Defect 12415

  This fix resolves an error that occurred when a CERT advisory was
  issued due to a buffer overflow in Kerberos 4 and Kerberos 5.

> You should also to a `kas examine' on the afs user too see if it have some
> fancy flags set.

Here's the output. I don't see any fancy flags.

<ricci at lab1-12:~>kas examine ricci admin
Administrator's (admin) Password: 

User data for ricci
  key (2) cksum is 1202377360, last cpw: Thu Mar 30 17:23:30 2000
  password will expire: Tue Dec  5 17:23:30 2000
  6 consecutive unsuccessful authentications are permitted.
  The lock time for this user is 17.1 minutes.
  User is not locked.
  entry never expires.  Max ticket lifetime 25.00 hours.
  last mod on Sat Jul 31 00:54:11 1999 by admin
  don't permit password reuse
<ricci at lab1-12:~>

> 
> Love

I've also tried updating my version of kth-krb to 1.0.2, but with no
improvement.

-- 
/-----------------------------------------------------------
| Robert Ricci - <ricci at eng.utah.edu>
| University of Utah - CADE Lab operator - www.cade.utah.edu
\-----------------------------------------------------------





More information about the Arla-drinkers mailing list