Your best friend for file transfer.

Fetch application logoFetch

Error number -20071 (4 posts)

This is an archived topic. The information in it is likely to be out-of-date and no longer applicable to current versions of Fetch.
  • Started 11 years ago by ahsherman
  • Latest reply 11 years ago from Jim Matthews
  • ahsherman Member

    This message occurs when trying to login to a Kerberized ftp server machine under Mac OS X. The Kerberos tickets seem to have been issued prior to the error (at least they look correct in the Kerberos admin application). There is no explanation with the error message--only a number. Anyone know what the error means and how to deal with it?

    Thanks.

    /Andy

    Posted 11 years ago #

  • Jim Matthews Administrator

    Have you tried Fetch 4.0.2b1, available from http://getfetch4.com/Fetch_4.0.2b1.sit ? It should give you a better error message. It might also be useful to see the contents of the Fetch Transcript window.

    Thanks,

    Jim Matthews
    Fetch Softworks

    Posted 11 years ago #

  • ahsherman Member

    As suggested, I've tried Fetch 4.0.2b1. It reports "Unknown Error20071" (spacing as shown). Any further ideas or suggestions?

    Here's the Transcript Window:
    ------------------------------------
    Fetch 4.0.2b1 System 0x1014 Serial FETCHED001-12KB-0W54 TEST
    Connecting to www.yale.edu port 21 (4/23/02 9:47:00 PM)
    220 Pantheon *** Kerberos-only *** FTP server (Version 6.00b4-1.0.2) ready.
    ADAT
    503 You must issue an AUTH first.
    AUTH KERBEROS_V4
    334 Send authorization data.
    sec_krbv4_get_auth_data() krbv4_service_name = ftp.elsinore
    sec_krbv4_get_auth_data() krbv4_service_name = rcmd.elsinore
    --------------------------------
    It appears that Fetch has obtained valid Kerberos tickets. The window in the Kerberos application shows tickets for both v4 and v5.

    For what it's worth, here is the Kerberos config file (which may not be correct, I suppose):
    ----------------------------------------
    domain_realm]
    .yale.edu = NET.YALE.EDU
    .net.yale.edu = NET.YALE.EDU
    .its.yale.edu = NET.YALE.EDU
    .cis.yale.edu = NET.YALE.EDU
    .ycc.yale.edu = NET.YALE.EDU

    [libdefaults]
    default_realm = NET.YALE.EDU
    ticket_lifetime = 600
    default_tkt_enctypes = des-cbc-crc
    default_tgs_enctypes = des-cbc-crc

    [realms]
    NET.YALE.EDU = {
    kdc = kserv1.net.yale.edu:750
    kdc = kserv2.net.yale.edu:750
    kdc = kserv3.net.yale.edu:750
    }
    [v4 realms]
    NET.YALE.EDU = {
    kdc = kserv1.net.yale.edu:750
    kdc = kserv2.net.yale.edu:750
    kdc = kserv3.net.yale.edu:750
    }
    [v4 domain_realm]
    .yale.edu = NET.YALE.EDU
    .net.yale.edu = NET.YALE.EDU
    .its.yale.edu = NET.YALE.EDU
    .cis.yale.edu = NET.YALE.EDU
    .ycc.yale.edu = NET.YALE.EDU
    -------------------------------------

    Posted 11 years ago #

  • Jim Matthews Administrator

    My best guess is that there's an incompatibility between Kerberos for Mac on OS X and the Kerberos support in that FTP server, but that's just a guess. The error 20071 appears to mean that the Kerberos software doesn't think you have a ticket-granting ticket, which shouldn't be the case.

    I am going to post a question to the krbdev@mit.edu mailing list. I would recommend subscribing to that list, or else contacting the help desk at Yale for support (since I'd imagine this problem must affect anyone using that server from OS X).

    Thanks,

    Jim Matthews
    Fetch Softworks

    Posted 11 years ago #

Topic closed

This topic has been closed.