Authenticating using lower case domain/realm

San tos sansancasd at gmail.com
Mon Mar 9 08:09:23 EDT 2009


You are right Ken, i did try it without @domain.com and it worked. However,
we must use use username at domain.com.

Thanks for you reply.




On Mon, Mar 9, 2009 at 12:05 PM, Ken Raeburn <raeburn at mit.edu> wrote:

> On Mar 9, 2009, at 07:48, San tos wrote:
>
>> It seems windows 2k, accepts either way, but maybe kerberos don't like the
>> response it receives:
>>
>> kinit(v5): KDC reply did not match expectations while getting initial
>> credentials
>>
>
> Yes, the MIT implementation treats realm names as case sensitive (as does
> the protocol).
> If you just use "kinit username" without the realm, it should use the form
> from the config file; I'm not sure how much that might help.
>
> Ken
>



More information about the Kerberos mailing list