Conference smurf::buildhelp

1806.0. "FWD: Re: Mark, can you help Farrell" by AOSG::FILTER (Automatic Posting Software - mail to flume::puck) Mon Sep 11 1995 22:24

Date Of Receipt: 	11-SEP-1995 17:54:01.07
From: 	SMURF::FLUME::"anderson@decwet.zso.dec.D5NET.dec.com"
To: 	flume::"ftw@marvin.zk3.dec.com"
CC: 	flume::odehelp, flume::glidden, anderson@DEC:.zko.flume
Subj: 	FWD: Re: Mark, can you help Farrell

I thought the same thing about kerberos.

We even commented out the compare line in the code.
We discovered it isn't that simple.
The problem is deeper then just a compare of 2
ip addresses.  We put a note on the net as
to if anyone else had the problem outside
of Digital and had solved it.  We talked to
the DECathena folks, they surely would have
run across the same problem and fixed it for
their customers!

The responses were all the same,  this is a
WELL KNOWN BUG  in kerberos.  IT IS NOT FIXED.
There are NO PLANS to fix it.

We see the solution is to go to kerberos V5.
We got v4 from the DECathena folks, so plan to
get v5 from the DECathena folks, and put it into
v3.1.

Tina

****************************************


From:	QUARRY::"ftw@marvin.zk3.dec.com" "11-Sep-1995 
1648"   11-SEP-1995 13:50:26.42
To:	anderson@dec:.zso.decwet (Tina Anderson), 
glidden@zk3.dec.com
CC:	odehelp@zk3.dec.com, schulter@zk3.dec.com
Subj:	Re: Mark, can you help Farrell 



> I don't understand why you didn't have this
> problem in v2.2.

I did but only with bsubmit.  workon, bco, etc. all were 
fine.

I fail to understand why someone can't fix kerberos...  
conjuring up
routes such that talking to red-net is not an acceptable 
solution since
it defeats the purpose of having an interface there.  I 
do need this
extra interface for some of the work I'm doing, and I 
can't have routing
table entries that bypass it.  I could put up with this 
before since
I could bco/bci and such and get most of my work done.  
Then I'd edit
/etc/rc.config and reboot when I had to submit.  This 
wasn't fun and
now the current situation is much less acceptable.

I will try to cobble up a host route to labrea that 
bypasses the fddi...
If I can do this then I can still talk to the rest of 
red-net directly.



	-- Farrell