cannot kinit to AD realm using alternative dns name

Mchugh, Sean SMchugh at
Fri May 8 10:55:30 EDT 2009

Douglas E. Engert [mailto:deengert at] wrote:


> Correct, Kerberos principals are case sensitive, (but Windows and DNS
> are insensitive.)
> So you realm name is GGG.LOCAL so must be upper case.
> > But not with:  username at _or_ username at ggg.local ; error
message ...

thanks for the clarification.  I was under the impression that
applications use [domain_realm] mappings
to translate the RHS of the userprincipalname to ucase or map the dns
domain.  After re-reading the 
man page section I understand the purpose now.

More information about the Kerberos mailing list