[37041] in Kerberos

home help back first fref pref prev next nref lref last post

RE: A client name with an '@'

daemon@ATHENA.MIT.EDU (Nordgren, Bryce L -FS)
Tue Jun 2 16:15:51 2015

From: "Nordgren, Bryce L -FS" <bnordgren@fs.fed.us>
To: Todd Grayson <tgrayson@cloudera.com>
Date: Tue, 2 Jun 2015 20:14:59 +0000
Message-ID: <82E7C9A01FD0764CACDD35D10F5DFB6E7E10F0@001FSN2MPN1-046.001f.mgd2.msft.net>
In-Reply-To: <CALNT6MXgt0r7HbeJ5=1-TEa5hBNDExs6+pkPbX-hs5_DhzV2Hw@mail.gmail.com>
Content-Language: en-US
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit


>>Or am I thinking wrong: Does kinit parse the user principal name into client and realm? 
>>Should I rename my realm to lowercase fedidcard.gov?

> Its either 12001000550281@FEDIDCARD.GOV or its 12001000550281@fedidcard.gov

That it is. Deleting the realm and recreating a lowercase realm fixed the issue. (I can't change the smart cards.) Now I probably should make sure that everyone's UPN is from the same realm...

Thanks all,
Bryce



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post