Bug in Kerberos JDK 1.4.2 / Windows XP ?

Henry B. Hotz hotz at jpl.nasa.gov
Wed Jun 9 14:58:11 EDT 2004


I'm sure there are doc's on this, but can you configure the workstation  
to add a correct-for-MIT/Heimdal default realm?  (name  
canonicalization?  or is that only on the server end?)

On Jun 8, 2004, at 8:19 AM, kerberos-request at MIT.EDU wrote:

> From: Jeffrey Altman [mailto:jaltman2 at nyc.rr.com]
> Sent: Monday, June 07, 2004 4:29 PM
> To: kerberos at mit.edu
> Subject: Re: Bug in Kerberos JDK 1.4.2 / Windows XP ?
>
>
> I believe that you are running into the problem of authenticating
> as the name the user logged in with.  Remember that Windows tries to
> be case insensitive whereas Kerberos is case sensitive.
>
> You must log into Windows using the name
>
> 	claude at MYREALM.FOO.COM
>
> instead of
>
> 	claude at myrealm.foo.com
>
> Jeffrey Altman
>
> Rouiller Claude wrote:
>> Isn't there a problem with the case (upper case / down case) of the
> service
>> principal names of the tickets placed in the JAAS subject?
>> Or maybe the problem is in Windows XP?
>>
>> I've described the problem in
>>
> http://forum.java.sun.com/thread.jsp? 
> forum=60&thread=528692&tstart=0&trange=
>> 15
>>
> <http://forum.java.sun.com/thread.jsp? 
> forum=60&thread=528692&tstart=0&trange
>> =15> .
>>
>> Claude
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu



More information about the Kerberos mailing list