diff options
| author | Sam Hartman <hartmans@mit.edu> | 2002-01-08 19:27:00 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2002-01-08 19:27:00 +0000 |
| commit | 50b5e3f72e5381cd9bb641dcdb28ebb4ba7e8734 (patch) | |
| tree | 3fdefc0cceabe14c336bf43deea06311ff945cc2 /src/kadmin | |
| parent | 436ffb7faf45b3a8da6af57b96610b42c1da2e10 (diff) | |
| download | krb5-50b5e3f72e5381cd9bb641dcdb28ebb4ba7e8734.tar.gz krb5-50b5e3f72e5381cd9bb641dcdb28ebb4ba7e8734.tar.xz krb5-50b5e3f72e5381cd9bb641dcdb28ebb4ba7e8734.zip | |
Get strong random bits at kadmind startup
provide better error message for current round of keytab not found
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14089 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kadmin')
| -rw-r--r-- | src/kadmin/server/ChangeLog | 5 | ||||
| -rw-r--r-- | src/kadmin/server/ovsec_kadmd.c | 11 |
2 files changed, 15 insertions, 1 deletions
diff --git a/src/kadmin/server/ChangeLog b/src/kadmin/server/ChangeLog index 9af1d19e3d..05e551404c 100644 --- a/src/kadmin/server/ChangeLog +++ b/src/kadmin/server/ChangeLog @@ -1,3 +1,8 @@ +2002-01-08 Sam Hartman <hartmans@mit.edu> + + * ovsec_kadmd.c (main): Get random data from /dev/random + (main): If we can't set gssapi names, hint that the keytab might be at fault + 2001-10-26 Ezra Peisach <epeisach@mit.edu> * schpw.c (process_chpw_request): Use GETSOCKNAME_ARG3_TYPE diff --git a/src/kadmin/server/ovsec_kadmd.c b/src/kadmin/server/ovsec_kadmd.c index 619e2b5eda..72d339a354 100644 --- a/src/kadmin/server/ovsec_kadmd.c +++ b/src/kadmin/server/ovsec_kadmd.c @@ -264,6 +264,15 @@ int main(int argc, char *argv[]) krb5_klog_init(context, "admin_server", whoami, 1); + + krb5_klog_syslog(LOG_INFO, "Seeding random number generator"); + ret = krb5_c_random_os_entropy(context, 1, NULL); + if(ret) { + krb5_klog_syslog(LOG_ERR, "Error getting random seed: %s, aborting", + error_message(ret)); + exit(1); + } + if((ret = kadm5_init("kadmind", NULL, NULL, ¶ms, KADM5_STRUCT_VERSION, @@ -489,7 +498,7 @@ int main(int argc, char *argv[]) oldnames++; if (!oldnames && _svcauth_gssapi_set_names(names, 2) == FALSE) { krb5_klog_syslog(LOG_ERR, - "Cannot set GSS-API authentication names, " + "Cannot set GSS-API authentication names (keytab not present?), " "failing."); fprintf(stderr, "%s: Cannot set GSS-API authentication names.\n", whoami); |