Received: from SOUTH-STATION-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA17179; Sat, 24 Feb 96 20:20:34 EST Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA20726; Sat, 24 Feb 96 19:08:21 EST Date: Sat, 24 Feb 96 19:08:21 EST From: MAILER-DAEMON@MIT.EDU (Mail Delivery Subsystem) Subject: Returned mail: Deferred: Host Name Lookup Failure Message-Id: <9602250008.AA20726@MIT.EDU> To: owner-kerberos@MIT.EDU ----- Transcript of session follows ----- 451 tri@qsun.att.com... reply: read error 451 tri@qsun.att.com... reply: read error 421 foobar.com.tcp... Deferred: Connection timed out during user open with kiwi.foobar.com 421 draper.com.tcp... Deferred: Connection timed out during user open with ns.draper.com 451 habs@inesc.pt... reply: read error 451 habs@inesc.pt... reply: read error 451 Tony.Lill@AJLC.Waterloo.ON.CA... reply: read error 451 Tony.Lill@AJLC.Waterloo.ON.CA... reply: read error 451 dwm@falcon.mbsa.com... reply: read error 451 dwm@falcon.mbsa.com... reply: read error 550 jhlee@minkowski.etri.re.kr... Host unknown 451 soonam@isse.gmu.edu... reply: read error 451 soonam@isse.gmu.edu... reply: read error 451 hangman@pyro.rh.imsa.edu... reply: read error 451 hangman@pyro.rh.imsa.edu... reply: read error 421 ccmpo-c.draper.com.tcp... Deferred: Connection timed out during user open with ns.draper.com 421 sci.uma.es.tcp... Deferred: Address family not supported by protocol family ----- Unsent message follows ----- Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA20668; Sat, 24 Feb 96 19:08:21 EST Received: by pad-thai.cam.ov.com (8.6.12/) id ; Sat, 24 Feb 1996 19:12:34 -0500 Received: from GATEWAY by pad-thai.cam.ov.com with netnews for kerberos-wrapper@cam.ov.com (kerberos@mit.edu) To: kerberos@MIT.EDU Date: 24 Feb 1996 18:43:52 -0500 From: eichin@cygnus.com (Mark Eichin) Message-Id: Organization: Cygnus Support -- Compilers & Kerberos Sender: usenet@cam.ov.com References: <4gleem$6mq@usenet.ucs.indiana.edu> Subject: Re: extent of random key patch? You should certainly read the code yourself to be sure... but the patches included changes to kdb_edit to handle the random case (seeding with K.M, since it's available, just like it does for session keys.) Similarly, ksrvutil now seeds off of the session key (which is why you need to start a fixed kdc *before* running the new ksrvutil code to change srvtabs...) _Mark_ Cygnus Support Cygnus Network Security http://www.cygnus.com/data/cns/