[33515] in Kerberos
Re: Client not found in Kerberos database
daemon@ATHENA.MIT.EDU (Marcus Watts)
Sun Jun 26 15:58:23 2011
Message-Id: <E1QavTF-000290-AZ@danbo.ifs.umich.edu>
To: Jaap Winius <jwinius@umrk.nl>
In-reply-to: <20110626214213.16071xsyisf5kfb4@bitis.umrk.nl>
Date: Sun, 26 Jun 2011 15:58:17 -0400
From: Marcus Watts <mdw@umich.edu>
Cc: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> Date: Sun, 26 Jun 2011 21:42:13 +0200
> To: kerberos@mit.edu
> From: Jaap Winius <jwinius@umrk.nl>
> Subject: Client not found in Kerberos database
>
> Hi folks,
>
> My site uses Debian squeeze for both workstations and servers with MIT
> Kerberos 1.8.3 for authentication. Although there are generally no
> complaints, from time to time users say that the workstations do not
> accept their passwords on the first attempt, even when they anticipate
> the issue and made a conscious effort to not make any mistakes. Upon
> examination of the KDC logs, I find some evidence to support their
> claims. The most obvious is this error:
>
> CLIENT_NOT_FOUND: jsmith@EXAMPLE.COM for krbtgt/EXAMPLE.COM@EXAMPLE.COM,
> Client not found in Kerberos database
>
> In most cases the login name is not not spelled correctly, or there is
> nothing like it in the database at all, but in others there is nothing
> wrong. Yet, this error occurs anyway.
>
> Does anyone have an explanation for this phenomenon?
>
> Thanks,
>
> Jaap
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
The example you posted appears to have a leading space on the kerberos
principal name. Of course, that could be just the result of reformatting
via your mail client. Generally speaking, control characters including
backspace could result in "invisible" text in your principal name.
-Marcus Watts
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
