[37540] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Beginner Kerberos question - problem with spnego authentication

daemon@ATHENA.MIT.EDU (JSoet)
Thu Jun 23 18:18:14 2016

Date: Thu, 23 Jun 2016 15:17:52 -0700 (MST)
From: JSoet <jordan.soet@ca.ibm.com>
To: kerberos@mit.edu
Message-ID: <1466720272669-45591.post@n3.nabble.com>
In-Reply-To: <CAGMFw4gp6anre_CjXgMEFa1TD1y7YVDfU2Cv3RO_NCgBE3WCiw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Thanks for your help Mike, your suggestion to look into DNS pointed me
towards this page:
http://web.mit.edu/Kerberos/krb5-1.13/doc/admin/princ_dns.html 
where I found out about the *ignore_acceptor_hostname* setting. When I
changed that to true then it fixed my problem. 

I'm unclear about what exactly the issue that setting is fixing is though,
is it likely that there's something wrong with my DNS setup? Or is it that
the application is using a different name? If it's just a problem with how
the application is passing the name, then I'll probably just leave it
because like I said I was just using the flask webserver as a test, but if
there's still something wrong with my dns setup then I'd prefer to fix it.



--
View this message in context: http://kerberos.996246.n3.nabble.com/Beginner-Kerberos-question-problem-with-spnego-authentication-with-webserver-tp45585p45591.html
Sent from the Kerberos - General mailing list archive at Nabble.com.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post