You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@directory.apache.org by "Marc de Lignie (JIRA)" <ji...@apache.org> on 2017/05/15 07:42:04 UTC

[jira] [Created] (DIRKRB-631) Not compatible with MIT Kerberos 1.11+

Marc de Lignie created DIRKRB-631:
-------------------------------------

             Summary: Not compatible with MIT Kerberos 1.11+
                 Key: DIRKRB-631
                 URL: https://issues.apache.org/jira/browse/DIRKRB-631
             Project: Directory Kerberos
          Issue Type: Bug
    Affects Versions: 1.0.0-RC2
         Environment: Debian, Fedora
            Reporter: Marc de Lignie
             Fix For: 1.0.0-GA


The Kerby kdc does not accept preauthication form a MIT Kerberos client starting from version 1.11. V1.11 hallmarks the implementation of the FAST OTP standard in MIT Kerberos, apparently with changes not understood by Kerby.
More details on stacktraces are available from:
http://mail-archives.apache.org/mod_mbox/directory-kerby/201705.mbox/browser
A failing test is available from:
https://github.com/vtslab/directory-kerby/tree/MitIssue

Without an update on Mit Kerberos compatibility Directory Kerby is not usable  for testing kerberos functionality in Apache TInkerpop's gremlin-python module (the more so because the Mit Kerberos 1.10 source distribution does not compile anymore with the gcc-5.x from recent LTS Linux distributions).



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)