Fetch Softworks

Error number -20071 (4 posts)

• Started 21 years ago by ahsherman
• Latest reply 21 years ago from Jim Matthews

• ahsherman Member

  This message occurs when trying to login to a Kerberized ftp server machine under Mac OS X. The Kerberos tickets seem to have been issued prior to the error (at least they look correct in the Kerberos admin application). There is no explanation with the error message--only a number. Anyone know what the error means and how to deal with it?

  Thanks.

  /Andy

  Posted 21 years ago #

• Jim Matthews Administrator

  Have you tried Fetch 4.0.2b1, available from http://getfetch4.com/Fetch_4.0.2b1.sit ? It should give you a better error message. It might also be useful to see the contents of the Fetch Transcript window.

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 21 years ago #

• ahsherman Member

  As suggested, I've tried Fetch 4.0.2b1. It reports "Unknown Error20071" (spacing as shown). Any further ideas or suggestions?

  Here's the Transcript Window:
  ------------------------------------
  Fetch 4.0.2b1 System 0x1014 Serial FETCHED001-12KB-0W54 TEST
  Connecting to www.yale.edu port 21 (4/23/02 9:47:00 PM)
  220 Pantheon *** Kerberos-only *** FTP server (Version 6.00b4-1.0.2) ready.
  ADAT
  503 You must issue an AUTH first.
  AUTH KERBEROS_V4
  334 Send authorization data.
  sec_krbv4_get_auth_data() krbv4_service_name = ftp.elsinore
  sec_krbv4_get_auth_data() krbv4_service_name = rcmd.elsinore
  --------------------------------
  It appears that Fetch has obtained valid Kerberos tickets. The window in the Kerberos application shows tickets for both v4 and v5.

  For what it's worth, here is the Kerberos config file (which may not be correct, I suppose):
  ----------------------------------------
  domain_realm]
  .yale.edu = NET.YALE.EDU
  .net.yale.edu = NET.YALE.EDU
  .its.yale.edu = NET.YALE.EDU
  .cis.yale.edu = NET.YALE.EDU
  .ycc.yale.edu = NET.YALE.EDU

  [libdefaults]
  default_realm = NET.YALE.EDU
  ticket_lifetime = 600
  default_tkt_enctypes = des-cbc-crc
  default_tgs_enctypes = des-cbc-crc

  [realms]
  NET.YALE.EDU = {
  kdc = kserv1.net.yale.edu:750
  kdc = kserv2.net.yale.edu:750
  kdc = kserv3.net.yale.edu:750
  }
  [v4 realms]
  NET.YALE.EDU = {
  kdc = kserv1.net.yale.edu:750
  kdc = kserv2.net.yale.edu:750
  kdc = kserv3.net.yale.edu:750
  }
  [v4 domain_realm]
  .yale.edu = NET.YALE.EDU
  .net.yale.edu = NET.YALE.EDU
  .its.yale.edu = NET.YALE.EDU
  .cis.yale.edu = NET.YALE.EDU
  .ycc.yale.edu = NET.YALE.EDU
  -------------------------------------

  Posted 21 years ago #

• Jim Matthews Administrator

  My best guess is that there's an incompatibility between Kerberos for Mac on OS X and the Kerberos support in that FTP server, but that's just a guess. The error 20071 appears to mean that the Kerberos software doesn't think you have a ticket-granting ticket, which shouldn't be the case.

  I am going to post a question to the krbdev@mit.edu mailing list. I would recommend subscribing to that list, or else contacting the help desk at Yale for support (since I'd imagine this problem must affect anyone using that server from OS X).

  Thanks,

  Jim Matthews
  Fetch Softworks

  Posted 21 years ago #