[30862] in Kerberos
Re: Server passing IP instead of FQDN to Kerberos (during SSH GSSAPI)
daemon@ATHENA.MIT.EDU (Mathew Rowley)
Thu Mar 12 10:32:28 2009
X-Barracuda-Envelope-From: mathew_rowley@cable.comcast.com
Date: Thu, 12 Mar 2009 08:31:02 -0600
From: Mathew Rowley <mathew_rowley@cable.comcast.com>
To: Thomas Mueller <thomas@chaschperli.ch>,
"kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <C5DE78C6.93F6%mathew_rowley@cable.comcast.com>
In-Reply-To: <gpa8v8$83l$1@ger.gmane.org>
Mime-version: 1.0
Content-Type: multipart/mixed; boundary="===============0817174486=="
Errors-To: kerberos-bounces@mit.edu
> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--===============0817174486==
Content-Type: text/plain;
charset="EUC-KR"
Content-Transfer-Encoding: quoted-printable
Yes, reverse lookup works correctly...
[root@rsa01 ~]# nslookup 10.252.152.78
Server: 10.252.152.70
Address: 10.252.152.70#53
78.152.252.10.in-addr.arpa name =3D kdc01.security.lab.comcast.net.
MAT
On 3/12/09 12:09 AM, "Thomas Mueller" <thomas@chaschperli.ch> wrote:
>=20
>=20
>> > When looking at the krb5kdc.log I see:
>> >
>> > Mar 11 22:59:09 kdc01.security.lab.comcast.net krb5kdc[17694](info):
>> > TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 10.252.152.78: UNKNOWN_SERVER:
>> > authtime 1236809289, red@COMCAST.NET for
>> > host/10.252.152.77@COMCAST.NET, Server not found in Kerberos database
>> > krb5kdc: Interrupted system call - while selecting for network input(1=
)
>> >
>> > It seems like the box I am trying to ssh to is sending
>> > =8Chost/10.242.142.77=A9=F6 instead of what I expected
>> > =8Chost/rsa01.security.lab.comcast.net=A9=F6. Does anyone have any idea why
>> > this would be happening? I have exact same configurations on RH5 boxe=
s
>> > that will work properly and send host/FQDN... Thanks.
>=20
> reverse lookup of 10.252.152.78 on the host sending the ip address
> instead of the hostname shows the expected hostname?
>=20
> - Thomas
>=20
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>=20
--=20
MAT
--===============0817174486==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0817174486==--
