AFP548 Changing the world one server at a time.

10.4.3 Server using Kerberos for FTP authentication

Home › Forums › OS X Server and Client Discussion › File Serving › 10.4.3 Server using Kerberos for FTP authentication

  • This topic is empty.
Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #364593
    Anonymous
    Guest

    All services such as AFP and Mail are sucessfully kerberized. However, FTP fails. Any magic tricks?

    #364614
    Anonymous
    Guest

    I have also tried Fetch. Seems to point to an FTP service misconfiguration. The transcript:

    220 myserver.example.com FTP server ready.
    ADAT
    503 You must issue an AUTH first.
    AUTH This command is checking whether this server supports Kerberos or GSS security, see RFC 2228
    504 This command is checking whether this server supports Kerberos or GSS security, see RFC 2228 is unknown to me
    AUTH GSSAPI
    334 Send authorization data.
    gss_send_tok_buff = ftp@myserver.example.com.
    ADAT
    535-GSSAPI error major: Incorrect channel bindings were supplied
    535-GSSAPI error minor: No error
    535 GSSAPI error: accepting context [ Incorrect channel bindings were supplied – No error ]
    release 2
    service 0gss_send_tok_buff = host@myserver.example.com.
    ADAT
    535-GSSAPI error major: Miscellaneous failure
    535-GSSAPI error minor: Wrong principal in request
    535 GSSAPI error: accepting context [ Miscellaneous failure – Wrong principal in request ]
    release 2
    service 1

    and the klist

    01/03/06 09:09:22 01/03/06 13:44:55 host/myserver.example.com@MY.CORRECT.REALM
    renew until 01/10/06 03:44:55
    01/03/06 09:09:22 01/03/06 13:44:55 ftp/myserver.example.com@MY.CORRECT.REALM
    renew until 01/10/06 03:44:55

    #364802
    Anonymous
    Guest

    launchproxy[15260]: /usr/libexec/xftpd: getnameinfo(): Non-recoverable failure in name resolution
    ftpd[15261]: getpeername (xftpd): Socket is not connected

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.