UNKNOWN_SERVER - Server not ,found in Kerberos database

Edward Murrell edward at dlconsulting.com
Wed Apr 18 17:23:19 EDT 2007


Jeff Blaine wrote:
> Jeffrey Altman wrote:
>   
>>> tkt=1 ses=1}, jblaine at rcf.foo.com for afs at rcf.foo.com
>>>       
>> Do you really have a lowercased realm?
>>     
>
> Yes.  No good?
>   
Not for the best. Active Directory assumes upper case everything for
example.

The FAQ at
http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html#realms says;

"The convention to use uppercase for realms names arose out of the
desire to easily distinguish between DNS domain names (which are
actually case-insensitive) and Kerberos realms. The Kerberos realm name
/is/ case sensitive (the realm foo.org is different than the realm
FOO.ORG). You are not required to have an uppercase Kerberos realm, but
I would strongly advise it.

It is worth noting that the recent revisions to the Kerberos standard
have specified that uppercase realm names are preferred and lowercase
realm names have been depreciated."




More information about the Kerberos mailing list