Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA19305; Mon, 11 Dec 95 22:19:13 EST Received: from typhoon.dstc.qut.edu.au by MIT.EDU with SMTP id AA10698; Mon, 11 Dec 95 21:00:46 EST Date: Mon, 11 Dec 95 21:00:46 EST From: MAILER-DAEMON@MIT.EDU (Mail Delivery Subsystem) Subject: Returned mail: Deferred: Connection timed out during user open with pyro.rh.imsa.edu Message-Id: <9512120200.AA10698@MIT.EDU> To: owner-kerberos@MIT.EDU ----- Transcript of session follows ----- 421 ecoult.ncsu.edu.tcp... Deferred: Connection refused by ecoult.ncsu.edu 421 prodigy.com.tcp... Deferred: Connection timed out during user open with pimaia1y.prodigy.com 451 pfenning@techfak.uni-bielefeld.de... reply: read error 451 pfenning@techfak.uni-bielefeld.de... reply: read error 421 gardenia.saclay.cea.fr.tcp... Deferred: Connection timed out during user open with oeillet.saclay.cea.fr >>> MAIL From: <<< 451 Nameserver timeout during parsing 451 kerberos@hub.ubc.ca... reply: read error 451 kerberos@hub.ubc.ca... reply: read error 451 martha@ds5000.dgsca.unam.mx... reply: read error 451 martha@ds5000.dgsca.unam.mx... reply: read error 451 habs@inesc.pt... reply: read error 451 habs@inesc.pt... reply: read error >>> RCPT To: <<< 553 unknown or illegal user: DJMSYS@ritvax.isc.rit.edu 550 DJMSYS@ritvax.isc.rit.edu... User unknown 421 uci.edu.tcp... Deferred: Connection timed out during user open with mta2.nts.uci.edu 451 jhlee@minkowski.etri.re.kr... reply: read error 451 jhlee@minkowski.etri.re.kr... reply: read error 421 jpmorgan.com.tcp... Deferred: Connection timed out during user open with jpmorgan.jpmorgan.com 421 dataplex.net.tcp... Deferred: Connection refused by MAIL.dataplex.net 451 ides@pencom.com... reply: read error 451 ides@pencom.com... reply: read error 421 pyro.rh.imsa.edu.tcp... Deferred: Connection timed out during user open with pyro.rh.imsa.edu ----- Unsent message follows ----- Received: from typhoon.dstc.qut.edu.au by MIT.EDU with SMTP id AA10089; Mon, 11 Dec 95 21:00:46 EST Received: (from gaskell@localhost) by typhoon.dstc.qut.edu.au (8.7.3/8.7.3) id MAA24701; Tue, 12 Dec 1995 12:00:28 +1000 (EST) Date: Tue, 12 Dec 1995 12:00:23 +1000 (EST) From: Gary Gaskell X-Sender: gaskell@typhoon.dstc.qut.edu.au To: Douglas Engert Cc: kerberos@MIT.EDU, David Conran , Jason Andrade , Andrew Sammut Subject: Using krb in a multiple realm environment In-Reply-To: <199507191236.HAA13196@achilles.ctd.anl.gov> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Hi Doug, I thought you might be the best person to respond to this question. The situation here is that six universities are involved in the DSTC. Currently our admins use kerberised rlogin to login securely to the various universities to perform admin tasks. We have elected to do this via two different kerberos realms. The usability question is: The default is that only one TGT exists in the user's cache at once. Now say that I am doing work locally (at realm = DSTC.QUT.EDU.AU) and what to concurrently do work at another university (At realm = DSTC.EDU.AU), when I kinit to the other realm, it wipes out the TGT to the current realm. Isn't that inconvenient? Would it be silly to hack the code to allow more than one TGT? Anyone else hassled by this? BTW, we found the bug with the ^c on OSF/1 3.2 on an alpha. I haven't yet posted the fixes, as I wish to be very sure on the detail before I post to such an astute audience (as it appears we triggered a kernel "feature", and I must still write some exploratory code to replace the error independently of the Kerberos rlogind code). regards Gary Gaskell Cooperative Research Centre for Research Scientist Distributed Systems Technology DSTC Ph: 61 7 3864 1051 Level 12, ITE Building Fax: 61 7 3864 1282 Queensland University of Technology Email: gaskell@dstc.edu.au Brisbane, Australia. Ph (A/H) (07) 3857 7912 Mobile: 0411 221 946 _________________________________________________________________