[29874] in Kerberos
Re: problem in sending AS_REQ
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon May 26 14:32:58 2008
To: Kerberos@mit.edu
In-Reply-To: <483ADF2B.9080907@globaledgesoft.com> (naveen bn's message of
"Mon\, 26 May 2008 16\:02\:51 +0000")
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 26 May 2008 11:31:39 -0700
Message-ID: <878wxwgbn8.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"naveen.bn" <naveen.bn@globaledgesoft.com> writes:
> [realms]
> _kerberos._udp.globaledgesoft.com = {
> admin_server = 172.16.8.141
> kdc = 172.16.8.141
> v4_instance_convert = {
> gesl = _kerberos._udp.globaledgesoft.com
> lithium = lithium.lcs. _kerberos._udp.globaledgesoft.com
> }
This is almost certainly not what you want. You're confusing the DNS SRV
records with the names of realms and hosts. The krb5.conf (and kdc.conf)
should contain simple realm names and hostnames, not the SRV record names.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
