[15857] in Kerberos-V5-bugs
[krbdev.mit.edu #8631] Improve error message for GSS service ticket
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Sat Jan 13 12:14:22 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8631@krbdev.mit.edu>
Message-ID: <rt-8631-48202.2.79246869041614@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8631'":;
Date: Sat, 13 Jan 2018 11:57:49 -0500 (EST)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
If you do "kinit -S servicename" and then contact that server principal
using GSSAPI, it works, assuming you used the correct service name.
If you use the wrong service name, you get the error message "Matching
credential not found" (and the ccache filename, after ticket 8052).
This message is unclear, firstly because it talks about an
implementation concern (finding a ticket that matches criteria chosen
by krb5_get_credential()) and secondly because it doesn't provide
enough parameters--most importantly for this use case, what service
principal we were looking for.
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
