[32213] in Kerberos

home help back first fref pref prev next nref lref last post

mixed case hostname issue

daemon@ATHENA.MIT.EDU (Matt Zagrabelny)
Wed Mar 31 11:24:25 2010

From: Matt Zagrabelny <mzagrabe@d.umn.edu>
To: kerberos <kerberos@mit.edu>
Date: Wed, 31 Mar 2010 10:21:05 -0500
Message-ID: <1270048865.4868.262.camel@grateful.d.umn.edu>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1307821769=="
Errors-To: kerberos-bounces@mit.edu


--===============1307821769==
Content-Type: multipart/signed; micalg="pgp-sha1";
	protocol="application/pgp-signature";
	boundary="=-wW72c2ftw4In9doJvMf7"


--=-wW72c2ftw4In9doJvMf7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Greetings,

I have a mixed-case hostname:

kplz354S2 (note the capital 'S'), its FQDN is kplz354S2.d.umn.edu.

When I try to telnet to it:

% telnet kplz354S2.d.umn.edu
Trying 10.25.1.14...
Will send login name and/or authentication information.
Connected to kplz354S2.d.umn.edu (10.25.1.14).
Escape character is '^]'.
[ Kerberos V5 refuses authentication ]
kerberos_server_auth:   Couldn't authenticate client from
grateful.d.umn.edu.

% Authentication failed

% Authentication failed
Connection closed by foreign host.



I get the following message in my kdc.log:

Mar 31 10:05:50 stout krb5kdc[27785](info): TGS_REQ (1 etypes {1})
131.212.60.196: UNKNOWN_SERVER: authtime 1270046583,  mzagrabe@D.UMN.EDU
for host/kplz354s2.d.umn.edu@D.UMN.EDU, Server not found in Kerberos
database

Note the lower-case 's' in the FQDN.

The principal in the KDC database matches the mixed-case FQDN:

kadmin.local:  listprincs
<snip>
host/kplz354S2.d.umn.edu@D.UMN.EDU
<snip>


FWIW, I've grepped /usr/share/doc/krb* for the word 'case' and didn't
find any hits.

Any ideas on this one?

Thanks,


--=20
Matt Zagrabelny - mzagrabe@d.umn.edu - (218) 726 8844
University of Minnesota Duluth
Information Technology Systems & Services
PGP key 4096R/42A00942 2009-12-16
Fingerprint: 5814 2CCE 2383 2991 83FF  C899 07E2 BFA8 42A0 0942

He is not a fool who gives up what he cannot keep to gain what he cannot
lose.
-Jim Elliot

--=-wW72c2ftw4In9doJvMf7
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=wDJ9
-----END PGP SIGNATURE-----

--=-wW72c2ftw4In9doJvMf7--


--===============1307821769==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============1307821769==--


home help back first fref pref prev next nref lref last post