Updating encryption types

Jeffrey Hutzelman jhutz at cmu.edu
Thu Jul 7 21:03:36 EDT 2005



On Thursday, July 07, 2005 05:46:18 PM -0700 Phil Dibowitz <phil at usc.edu> 
wrote:

> and the right tgt (based on Kerberos by Brian Tung), doesn't seem to be
> doing anything:
>
> krbtgt at ISD.USC.EDU

This principal is meaningless, and is used for nothing.

> and the mystery ticket is doing everything:
>
> krbtgt/ISD.USC.EDU at ISD.USC.EDU

This principal is the local-realm ticket-granting service.

In other words, it's working exactly like it's supposed to.  It's anyone's 
guess where the meaningless principal came from.


More information about the Kerberos mailing list