GSS_C_HOSTBASED_SERVICE and Windows 2000

Brian Smith brian-l-smith at uiowa.edu
Sat Feb 23 22:52:40 EST 2002


bbense at networking.stanford.edu ("Booker C. Bense") wrote in message news:<Pine.GSO.4.44.0202231437590.2424-100000 at shred.stanford.edu>...
> On 23 Feb 2002, Brian Smith wrote:
> > CVS uses GSS-API to support Kerberos. I am trying to get CVS to work
> > with MS Active Directory Kerberos.
> >
> > The CVS code I have is using gss_nt_service_name service principal
> > name (SPN) format; i.e. "cvs at hostname.domain". I realize that Active
> > Directory needs a SPN in the form GSS_C_HOSTBASED_SERVICE; i.e.
> > "cvs/hostname.domain".
> 
> - I don't think this is actually your problem. The nt_service_name is
> translated to the kerberos form of the service name by the gssapi
> library. What errors were you getting with the orginal code ?
> 
> - Booker C. Bense

Thanks for the reply. Of course you are correct, and in fact
GSS_C_HOSTBASED_SERVICE is the same as gss_c_nt_service
(service at hostname.domain). My problem was actually caused by a
configuration problem.

Thanks,
Brian



More information about the Kerberos mailing list