Is KRB5_CONFIG info cached?

Mike Friedman mikef at ack.Berkeley.EDU
Fri Jun 30 13:30:47 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 30 Jun 2006 at 01:39 (-0400), Marcus Watts wrote:

> I believe you're still barking up the wrong tree.  The default realm is 
> just that, a default.  If you really want to specify two different 
> realms, then that's fine -- that's why you can specify the realm 
> explicitly and override the default.

Marcus,

You're right, as I discovered late yesterday.  My problem was that in 
specifying the client (user) principal to be authenticated, I wasn't 
qualifying it with the realm, so I kept getting the default realm as 
listed in my config file.  Once I fixed that, each of my subroutine calls 
would connect to the proper realm.

Thanks.

Mike

_________________________________________________________________________
Mike Friedman                        System and Network Security
mikef at ack.Berkeley.EDU               2484 Shattuck Avenue
1-510-642-1410                       University of California at Berkeley
http://socrates.berkeley.edu/~mikef  http://security.berkeley.edu
_________________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBRKVfyq0bf1iNr4mCEQIAOQCeKEgVIhm7EstMYhgNNRmdtu/ZyWoAoLRq
ysaWUb78kPJ3rdoWaKp5TgtO
=Pyjp
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list