RE: Kerberos for Windows 2.6.5 ccname FILE: issues

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

RE: Kerberos for Windows 2.6.5 ccname FILE: issues

Hughes, Noah L [ECSS]
Jeffrey,

You are right, kdestroy.exe works with the FILE:c:\temp\krbcache.  The
reason I had trouble was that the destroy function in Leash32 locked the
file and went into the 99% CPU usage.

The kdestroy.exe error was from Leash32 locking the file.

It appears that Leash32 is the program that has problems with destorying
the FILE:c:\temp\krbcache ticket.


-----Original Message-----
From: [hidden email] on behalf of Jeffrey Altman
Sent: Fri 7/15/2005 4:44 PM
To: [hidden email]
Cc:
Subject: Re: Kerberos for Windows 2.6.5 ccname FILE: issues
Noah:

Can you provide any additional information that might be used to
replicate the problem?

I'm using Windows XP SP2:

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]set
KRB5CCNAME=FILE:c:\temp\krbcache

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kinit [hidden email]
Password for [hidden email]:

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kvno
afs/[hidden email]
afs/[hidden email]: kvno = 3

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
Ticket cache: FILE:c:\temp\krbcache
Default principal: [hidden email]

Valid starting     Expires            Service principal
07/15/05 17:42:38  07/16/05 03:42:39
krbtgt/[hidden email]
07/15/05 17:42:55  07/16/05 03:42:39  afs/[hidden email]


Kerberos 4 ticket cache: API:krb4cc
Principal: [hidden email]

  Issued              Expires             Principal
07/15/05 17:37:39  07/16/05 03:42:39
[hidden email]

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]kdestroy

[C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
klist.exe: No credentials cache found (ticket cache
FILE:c:\temp\krbcache)


Kerberos 4 ticket cache: API:krb4cc
klist.exe: No ticket file (tf_util)

Jeffrey Altman


Noah Hughes wrote:

> I have found these problems when running Kerberos for Windows 2.6.5:
>
> When I use the environment variable %KRB5CCNAME% and set it to
> "FILE:c:\temp\krbcache" without the quotes it works fine.  Leash is
> able to create and renew, but uses 100% CPU time when I try to destroy
> the ticket.
>
> Also kdestoy.exe does not destroy the ticket and also fails giving an
> error message
>
> "kdestroy: No credentials cache found while destroying cache"
>
> When I use the registry key
> "HKEY_LOCAL_MACHINE\SOFTWARE\MIT\kerberos5,cnname" to
> "FILE:c:\temp\krbcache"
>
> Again Leash is able to create and renew, but it uses 100% CPU when you
> try to destroy the ticket.  However, kdestroy is able to destory the
> ticket using this method.
>
> Is there any way to get Leash to destory this ticket when using the
> FILE:c:\temp\krbcache?
>
> Thanks
>
> Noah Hughes
>
> ________________________________________________
> Kerberos mailing list           [hidden email]
> https://mailman.mit.edu/mailman/listinfo/kerberos
>

--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos



________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: Kerberos for Windows 2.6.5 ccname FILE: issues

Jeffrey Altman-3
I can replicate the problem but don't see anything obviously wrong.
Please send a bug report to [hidden email]

Jeffrey Altman


Hughes, Noah L [ECSS] wrote:

> Jeffrey,
>
> You are right, kdestroy.exe works with the FILE:c:\temp\krbcache.  The
> reason I had trouble was that the destroy function in Leash32 locked the
> file and went into the 99% CPU usage.
>
> The kdestroy.exe error was from Leash32 locking the file.
>
> It appears that Leash32 is the program that has problems with destorying
> the FILE:c:\temp\krbcache ticket.
>
>
> -----Original Message-----
> From: [hidden email] on behalf of Jeffrey Altman
> Sent: Fri 7/15/2005 4:44 PM
> To: [hidden email]
> Cc:
> Subject: Re: Kerberos for Windows 2.6.5 ccname FILE: issues
> Noah:
>
> Can you provide any additional information that might be used to
> replicate the problem?
>
> I'm using Windows XP SP2:
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]set
> KRB5CCNAME=FILE:c:\temp\krbcache
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]kinit [hidden email]
> Password for [hidden email]:
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]kvno
> afs/[hidden email]
> afs/[hidden email]: kvno = 3
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
> Ticket cache: FILE:c:\temp\krbcache
> Default principal: [hidden email]
>
> Valid starting     Expires            Service principal
> 07/15/05 17:42:38  07/16/05 03:42:39
> krbtgt/[hidden email]
> 07/15/05 17:42:55  07/16/05 03:42:39  afs/[hidden email]
>
>
> Kerberos 4 ticket cache: API:krb4cc
> Principal: [hidden email]
>
>   Issued              Expires             Principal
> 07/15/05 17:37:39  07/16/05 03:42:39
> [hidden email]
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]kdestroy
>
> [C:\src\openafs\openafs-cvs\src\WINNT\afsd]klist
> klist.exe: No credentials cache found (ticket cache
> FILE:c:\temp\krbcache)
>
>
> Kerberos 4 ticket cache: API:krb4cc
> klist.exe: No ticket file (tf_util)
>
> Jeffrey Altman
>
>
> Noah Hughes wrote:
>
>
>>I have found these problems when running Kerberos for Windows 2.6.5:
>>
>>When I use the environment variable %KRB5CCNAME% and set it to
>>"FILE:c:\temp\krbcache" without the quotes it works fine.  Leash is
>>able to create and renew, but uses 100% CPU time when I try to destroy
>>the ticket.
>>
>>Also kdestoy.exe does not destroy the ticket and also fails giving an
>>error message
>>
>>"kdestroy: No credentials cache found while destroying cache"
>>
>>When I use the registry key
>>"HKEY_LOCAL_MACHINE\SOFTWARE\MIT\kerberos5,cnname" to
>>"FILE:c:\temp\krbcache"
>>
>>Again Leash is able to create and renew, but it uses 100% CPU when you
>>try to destroy the ticket.  However, kdestroy is able to destory the
>>ticket using this method.
>>
>>Is there any way to get Leash to destory this ticket when using the
>>FILE:c:\temp\krbcache?
>>
>>Thanks
>>
>>Noah Hughes
>>
>>________________________________________________
>>Kerberos mailing list           [hidden email]
>>https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>
>

--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos