[24247] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Updating encryption types

daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Jul 7 21:02:40 2005

From: Russ Allbery <rra@stanford.edu>
Date: Thu, 07 Jul 2005 17:49:24 -0700
Message-ID: <87d5pu15rf.fsf@windlord.stanford.edu>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Phil Dibowitz <phil@usc.edu> writes:

> OK, so going back, I find that

> krbtgt/ISD.USC.EDU@ISD.USC.EDU is for crossrealm trust.
> krbtgt@ISD.USC.EDU was our original tgt.

> However, now all tickets seem to be coming from
> krbtgt/ISD.USC.EDU@ISD.USC.EDU. Now the person who setup
> krbtgt/ISD.USC.EDU@ISD.USC.EDU and the cross-realm trust was 2 admins
> ago - did they make a mistake, or is this a bug in kerb, or is this
> expected behavior?

I would expect your krbtgt ticket to include your realm.  Ours always has,
and we haven't set up cross-realm trust.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post