[37973] in Kerberos
Re: Testing 3 Kerberos realms from same server
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon May 1 14:47:40 2017
To: Tareq Alrashid <tareq@qerat.com>, kerberos@mit.edu
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <65ba54ba-4016-cf1e-a8dd-deb3750c22ec@mit.edu>
Date: Mon, 1 May 2017 14:47:19 -0400
MIME-Version: 1.0
In-Reply-To: <50BD34DC-D12B-45CD-B507-CFD5D1FEB647@qerat.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On 05/01/2017 11:04 AM, Tareq Alrashid wrote:
[...]
> Code written in Python simply loops through each of the 3 realms, kinit with the keytab performs a few kadmin operations and either passes or fails.
>
> The strange result is that only the realm name set by “default_realm =“, pass and all others fail! If I manually change value to one of the other realm names; yep! same corresponding result.
Without specifics it's hard to be sure, but my guess would be that you
need to use the kadmin -r option.
I recently wrote up some documentation text going over the effects of
the default_realm setting; you can find it here:
http://web.mit.edu/kerberos/krb5-latest/doc/admin/host_config.html#default-realm
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
