[21152] in Kerberos

home help back first fref pref prev next nref lref last post

RE: trouble with fedora and active directory

daemon@ATHENA.MIT.EDU (Wachdorf, Daniel R)
Thu Mar 25 18:05:35 2004

Message-ID: <AC89BDA1E3CCBC42B9CA5B50FE7934D3066F131E@es10snlnt.sandia.gov>
From: "Wachdorf, Daniel R" <drwachd@sandia.gov>
To: "'swbell'" <kerygma2@swbell.net>, kerberos@mit.edu
Date: Thu, 25 Mar 2004 16:03:39 -0700
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Even though active directory says its realm (or usernames) are in lowercase,
they are not.  You should be able to just modify the krb5.conf file and make
the AD realm uppercase, that should fix it.

-dan

-----Original Message-----
From: swbell [mailto:kerygma2@swbell.net] 
Sent: Thursday, March 25, 2004 3:23 PM
To: kerberos@MIT.EDU
Subject: Re: trouble with fedora and active directory

in article 0122CEB9EA43D511B46B00508BE3BDD209740F08@fszhtv13.wpafb.af.mil,
Hobbs Byron K Contr AFRL/VAOO at Byron.Hobbs@wpafb.af.mil wrote on 3/24/04
10:30 PM:

> Kinit(v5) KDC reply did not match expectations while getting initial
> credentials

You can get this error when the case of your principal name doesn't match
the one returned by the AD KDC.  For example:
    administrator@mydomain.com
But the KDC returns the ticket as
    Administrator@MYDOMAIN.COM



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post