[23542] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Cross-realm Authentication with Windows Server 2003

daemon@ATHENA.MIT.EDU (Jeffrey Hutzelman)
Wed Mar 16 18:43:24 2005

Date: Wed, 16 Mar 2005 18:42:00 -0500
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: "Jeremy J. Casper" <casper@umn.edu>, kerberos@mit.edu
Message-ID: <F391C9629809FD91B84F04D8@sirius.fac.cs.cmu.edu>
In-Reply-To: <42360FC0.9000508@umn.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Errors-To: kerberos-bounces@mit.edu



On Monday, March 14, 2005 04:27:12 PM -0600 "Jeremy J. Casper" 
<casper@umn.edu> wrote:

> 1. ran the command kadmin: addprinc -e des-cbc-crc:normal
> krbtgt/ad.school.edu

> Mar 14 16:10:19 kerberos.school.edu krb5kdc[15690](info): TGS_REQ (5
> etypes {23 3 1 24 -135}) 128.128.128.128(88): UNKNOWN_SERVER: authtime
> 1110838219,  user@SCHOOL.EDU for krbtgt/AD.UMN.EDU@SCHOOL.EDU, Server not
> found in Kerberos database
>
> Any ideas on why we are getting the error "Server not found in Kerberos
> database"?


Kerberos principal and realm names are case-sensitive.
krbtgt/ad.school.edu and krbtgt/AD.UMN.EDU are not the same principal.
The uppercase name is the correct one.

-- Jeffrey T. Hutzelman (N3NHS) <jhutz+@cmu.edu>
   Sr. Research Systems Programmer
   School of Computer Science - Research Computing Facility
   Carnegie Mellon University - Pittsburgh, PA

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post