problem in sending AS_REQ

Russ Allbery rra at stanford.edu
Mon May 26 14:31:39 EDT 2008


"naveen.bn" <naveen.bn at globaledgesoft.com> writes:

> [realms]
>      _kerberos._udp.globaledgesoft.com = {
>         admin_server = 172.16.8.141
>         kdc = 172.16.8.141
>         v4_instance_convert = {
>             gesl =  _kerberos._udp.globaledgesoft.com
>             lithium = lithium.lcs. _kerberos._udp.globaledgesoft.com
>         }

This is almost certainly not what you want.  You're confusing the DNS SRV
records with the names of realms and hosts.  The krb5.conf (and kdc.conf)
should contain simple realm names and hostnames, not the SRV record names.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list