A client name with an '@'

Nordgren, Bryce L -FS bnordgren at fs.fed.us
Mon Jun 1 19:02:17 EDT 2015


> $ kinit '12001000550281\@fedidcard.gov at FEDIDCARD.GOV'

Thanks! Making progress!

It now prints a single backslash when describing the principal, both in errors emitted from kinit and the "listprincs" command in kadmin.local. However, I'm back to "client name mismatch" out of kinit, presumably because the MS User Principal Name in the certificate lacks the backslash.

Bryce






More information about the Kerberos mailing list