Chance Callahan

Results 8 comments of Chance Callahan

I'm attaching sample code, and a trace from the client-side and server-side, albeit taken at different times. The odd part is, in the packets themselves, they look correct, at least...

Also, only the client trace has the working MIT AS-REQ, but both have the failing Kerb.NET AS-REQ.

> For completeness what happens if instead you set username = "user"; and then set the credential as new KerberosPasswordCredential(username, password, "example.com");. Alternatively leave the username alone but also explicitly...

Sorry for the delay! So, no dice. I don't have a packet capture on this computer, but I ran one on the other computer and it was still sending NT-ENTERPRISE-PRINCIPAL....

I do have access to both both OS's and both archs. I will start compiling packages soon. I really think this project will go far.

At least for Fedora and probably Arch, the following drop-in file should resolve the issue for now. /etc/modules-load.d/tailscale.conf ``` # Load needed kernel modules to get around Fedora BZ#2321325 xt_connmark...

> @ccallahan Does that work? I think the module is loading, but it cannot be used correctly. If I manually load those modules on Fedora, Tailscale starts working properly, so...