Authenticating using lower case domain/realm

Ken Raeburn raeburn at MIT.EDU
Mon Mar 9 08:05:24 EDT 2009


On Mar 9, 2009, at 07:48, San tos wrote:
> It seems windows 2k, accepts either way, but maybe kerberos don't  
> like the
> response it receives:
>
> kinit(v5): KDC reply did not match expectations while getting initial
> credentials

Yes, the MIT implementation treats realm names as case sensitive (as  
does the protocol).
If you just use "kinit username" without the realm, it should use the  
form from the config file; I'm not sure how much that might help.

Ken



More information about the Kerberos mailing list