Some problem in forming the TGS request pkt with krb5_parse_name()

Jeffrey Altman jaltman2 at nyc.rr.com
Mon Nov 28 23:48:52 EST 2005


The krb5_parse_name() function is a convenience function
designed to construct a krb5_principal of type KRB5_NT_PRINCIPAL
from an input string.   This function will succeed as long
as the input can be parsed into one or more components plus
an optional realm.

What functions are you using to construct the request to the KDC?

Please keep in mind that Kerberos authenticates two peers
to each other by name.   The requirement is that the service
principal exist in the Kerberos Database.   Do you have service
principals in the KDB of the form "host/15.76.56.23 at DOMAIN"?

Jeffrey Altman



More information about the Kerberos mailing list