Wrong principal in request using virt interface
Christopher D. Clausen
cclausen at acm.org
Mon Jan 29 14:57:38 EST 2007
petesea at bigfoot.com wrote:
> I'm moving the server to a new cluster of RHE hosts that use virtual
> interfaces (eg. eth0:1) to allow for failover to a new host while
> still maintaining the original IP address. On this new system I'm
> getting the following error when I run sshd in debug (-ddd) mode:
>
> Wrong principal in request
>
> I have 2 IP addresses and 2 hostnames associated with the 2 interfaces
> (one of them a virtual interface) on my workstation:
>
> interface hostname ip
> -----------------------------------------
> eth0 gort.home.org 192.168.0.2
> eth0:1 cvs.home.org 192.168.0.200
Can you simply fail-over using the same IP on both interfaces? (I believe there is a bonding module in Linux that can do this.)
I don't think your setup will work b/c Kerberos relies upon proper DNS records for machines and having the machine change its hostname is bad.
<<CDC
More information about the Kerberos
mailing list