GSSAPI client on Windows

Jeffrey Altman jaltman at columbia.edu
Tue Jul 5 10:13:05 EDT 2005


SFBZH at aol.com wrote:

> I have two computers:
> pc36 is a Linux Red Hat 6.2 station supporting the kdc and the service.
> pc35 is a Windows 98 station supporting the client.

> The server_name is "server/pc36 at DOMAIN.COM" and the ticket in the local cache is also "server/pc36 at DOMAIN.COM".
> 
> What am I doing wrong?
> If you need any other detail (krb5.ini for exemple), feel free to ask.

It is very important with MIT Kerberos that you use fully qualified
domain names for your hosts.   aka

    server/pc36.domain.com at DOMAIN.COM

The libraries will perform a lookup on the name in DNS in order to
ensure that the specified name is canonical.  (in order to support
multi-homed machines)

Jeffrey Altman


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3256 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20050705/d27db26c/attachment.bin


More information about the krbdev mailing list