Updating encryption types
Russ Allbery
rra at stanford.edu
Thu Jul 7 20:49:24 EDT 2005
Phil Dibowitz <phil at usc.edu> writes:
> OK, so going back, I find that
> krbtgt/ISD.USC.EDU at ISD.USC.EDU is for crossrealm trust.
> krbtgt at ISD.USC.EDU was our original tgt.
> However, now all tickets seem to be coming from
> krbtgt/ISD.USC.EDU at ISD.USC.EDU. Now the person who setup
> krbtgt/ISD.USC.EDU at ISD.USC.EDU and the cross-realm trust was 2 admins
> ago - did they make a mistake, or is this a bug in kerb, or is this
> expected behavior?
I would expect your krbtgt ticket to include your realm. Ours always has,
and we haven't set up cross-realm trust.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list