[19722] in Kerberos
Re: kerberos ftpd bug? can't get it to work (New, sort of)
daemon@ATHENA.MIT.EDU (Cesar Garcia)
Fri Aug 1 10:42:41 2003
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <16170.31748.852670.965197@limus.ms.com>
Date: Fri, 1 Aug 2003 10:41:08 -0400
From: Cesar Garcia <Cesar.Garcia@morganstanley.com>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
In-Reply-To: <200308011327.h71DR1sG008453@ginger.cmf.nrl.navy.mil>
cc: root <jpalma78@hotmail.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
You can also inspect for which principal a service ticket was
acquired, on the client side via klist. Make sure there is a
corresponding keytab entry for this principal on the target host
(klist -k).
>>>>> "Ken" == Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
>>> GSSAPI accepted as authentication type
>>> GSSAPI error major: Miscellaneous failure
>>> GSSAPI error minor: No principal in keytab matches desired name
Ken> If you turn on ftpd debugging (-d), ftpd will log a whole bunch of crap
Ken> to syslog. One of the things it logs is the name it's trying to use
Ken> locally. I suspect that the problem is something akin to listing the
Ken> "short" name of the host first in /etc/hosts.
Ken> --Ken
Ken> ________________________________________________
Ken> Kerberos mailing list Kerberos@mit.edu
Ken> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
