Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!news.uu.net!mcsun!ukc!edcastle!jaw
From: jaw@castle.ed.ac.uk (Graeme Wood)
Newsgroups: comp.protocols.kerberos
Subject: Kerberos and two ethernet ports
Message-ID: <10452@castle.ed.ac.uk>
Date: 22 May 91 12:57:44 GMT
Sender: news@castle.ed.ac.uk
Organization: Distributed Unix Support, Edinburgh University Computing Service
Lines: 25


I have recently attemted to put up kerberos on a Sequent S81.  The
source was the Bones distribution with Eric Young's DES library.

The source compiled ok, but when I run kinit and talked to our kerberos
server I get an authentication error:

sequent$ kinit
EUCS Project Fred (sequent)
Kerberos Initialization
Kerberos name: jaw
kinit: Password incorrect
sequent$

I believe that the problem is caused by the Sequent having two ethernet
ports and kerberos is seeing a request coming from the secondary enet
port with the IP address of the primary enet port in the authenticator 
and so rejects the request thinking that someone is trying to masquerade
as the host. 

Has anyone else seen this problem? Does anybody have any ideas as to
what could be happening and how I could fix it or work around it?

Graeme Wood
(Graeme.Wood@edinburgh.ac.uk)