[24249] in Kerberos
Re: Updating encryption types
daemon@ATHENA.MIT.EDU (Phil Dibowitz)
Thu Jul 7 21:18:48 2005
Date: Thu, 7 Jul 2005 18:18:16 -0700
From: Phil Dibowitz <phil@usc.edu>
To: Jeffrey Hutzelman <jhutz@cmu.edu>
Message-ID: <20050708011816.GD8907@usc.edu>
Mail-Followup-To: Jeffrey Hutzelman <jhutz@cmu.edu>,
Kevin Coffman <kwc@citi.umich.edu>, kerberos@mit.edu,
Toan Nguyen <toan@usc.edu>
Mime-Version: 1.0
In-Reply-To: <EBAEED08FF85981D9BB2768C@sirius.fac.cs.cmu.edu>
cc: Toan Nguyen <toan@usc.edu>
cc: Kevin Coffman <kwc@citi.umich.edu>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============78531276830928176=="
Errors-To: kerberos-bounces@mit.edu
--===============78531276830928176==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="+te1M04ZWIfilseV"
Content-Disposition: inline
--+te1M04ZWIfilseV
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Jul 07, 2005 at 09:03:36PM -0400, Jeffrey Hutzelman wrote:
>=20
>=20
> On Thursday, July 07, 2005 05:46:18 PM -0700 Phil Dibowitz <phil@usc.edu>=
=20
> wrote:
>=20
> >and the right tgt (based on Kerberos by Brian Tung), doesn't seem to be
> >doing anything:
> >
> >krbtgt@ISD.USC.EDU
>=20
> This principal is meaningless, and is used for nothing.
>=20
> >and the mystery ticket is doing everything:
> >
> >krbtgt/ISD.USC.EDU@ISD.USC.EDU
>=20
> This principal is the local-realm ticket-granting service.
>=20
> In other words, it's working exactly like it's supposed to. It's anyone'=
s=20
> guess where the meaningless principal came from.
So krbtgt@REALM is not what MIT krb uses as the TGT, it uses
krbtgt/REALM@REALM - just a discrepency between the MIT implimentation and =
the
Kerb book I have?
OK, I'm happy with that.
Deleting the meaningless ticket in test seems to be harmless. Sweet. OK,
awesome, thanks.
--=20
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 180 - 213-821-5427
--+te1M04ZWIfilseV
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFCzdRY7lkZ1Iyv898RAl5eAJ9XC0ujKNZF3TE79tK7ofXksUvftACgkGI0
FRTGeV1pzKU5UlS1305yyq0=
=qaUW
-----END PGP SIGNATURE-----
--+te1M04ZWIfilseV--
--===============78531276830928176==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============78531276830928176==--
