Bug in Kerberos JDK 1.4.2 / Windows XP ?

[Rouiller Claude]

The problem is that I get a ticket like "claude at MYREALM.FOO.COM to go to
krbtgt/myrealm.foo.com at MYREALM.FOO.COM"
and I should get one like "claude at MYREALM.FOO.COM to go to
krbtgt/MYREALM.FOO.COM at MYREALM.FOO.COM".

And I don't know how to tell Windows that my ticket must refer to
krbtgt/MYREALM.FOO.COM at MYREALM.FOO.COM (instead of
krbtgt/myrealm.foo.com at MYREALM.FOO.COM).

Thanks, Claude

-----Original Message-----
From: Jeffrey Altman [mailto:jaltman2 at nyc.rr.com] 
Sent: Monday, June 07, 2004 4:29 PM
To: kerberos at mit.edu
Subject: Re: Bug in Kerberos JDK 1.4.2 / Windows XP ?


I believe that you are running into the problem of authenticating
as the name the user logged in with.  Remember that Windows tries to
be case insensitive whereas Kerberos is case sensitive.

You must log into Windows using the name

	claude at MYREALM.FOO.COM

instead of

	claude at myrealm.foo.com

Jeffrey Altman

Rouiller Claude wrote:
> Isn't there a problem with the case (upper case / down case) of the
service
> principal names of the tickets placed in the JAAS subject?
> Or maybe the problem is in Windows XP?
> 
> I've described the problem in
>
http://forum.java.sun.com/thread.jsp?forum=60&thread=528692&tstart=0&trange=
> 15
>
<http://forum.java.sun.com/thread.jsp?forum=60&thread=528692&tstart=0&trange
> =15> .
> 
> Claude
> 
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 

-- 
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos