[207] in winnt
Re: Kerberos Error 8
daemon@ATHENA.MIT.EDU (Don Nelson)
Wed Aug 5 16:46:05 1998
Date: Wed, 05 Aug 1998 16:43:42 -0400
To: Kathleen Kern Bowman <kkern@MIT.EDU>, itpartners@MIT.EDU,
ntpartners@MIT.EDU
From: Don Nelson <dnelson@psfc.mit.edu>
In-Reply-To: <3.0.2.32.19980805105633.012c5580@hesiod>
At 10:56 AM 8/5/98 , Kathleen Kern Bowman wrote:
>Since I had good luck with my last question, I will try another one...
>
>We have a new employee who has a new athena account already set up. I have
>installed Eudora 2.2 on his new NT workstation, configured all the
>settings, and ran Mink. When he tries to log in, he gets a Kerberos Error
>8 -- Principal Unknown. However, he can initialize tickets when running
>leash. We spent 1/2 on the phone with user support, but no solutions yet
>-- it looks like all the settings are correct.
The 'Error 8 - Principal Unknown' error (from Eudora Pro 2.2) can be caused
by an easily overlooked improper case for a parameter that you would not
expect to be case-sensitive.
The 'Service Format' parameter in the Kerberos options dialog box has a
default of: %1.%4@%3
The parameters that are substituted in this service format string are:
%1 = service name
%3 = realm
%4 = POP host name
The %4 parameter, the POP host name, must be lowercase.
With Eudora Pro 2.2 for Windows NT/9X, in order for %4 to be replaced by
the correct lowercase string, your 'POP Account' must be entered in
lowercase (in the 'Getting Started' dialog box). Specifying the 'POP
Account' in uppercase is the mistake that is most often the cause of the
inexplicable 'Kerberos Error 8 - Principal Unknown' error.
There are two other case-sensitive parameters in the Options/Kerberos
dialog box. Specifying the service name (pop) in uppercase can cause this
same error message. Specifying the realm in lowercase can produce a 'realm
unknown' error message, I believe.
The service format string after this substitution should look something like:
pop.po6@ATHENA.MIT.EDU
(The 'po6' would be replaced by your own POP server name. You can key in
the full string or any part of the string instead of relying on the
%1.%4@%3 substitutions, if you prefer.)
-----------------------------------
The case sensitivity of these parameters is noted in
"Installation Instructions for Eudora (v2.2) for Windows 95 and NT
Computers" at
http://web.mit.edu/is/help/eudora/install-95.html
GETTING STARTED
Under Pop Account, change the entry to
"username@post-office-server.mit.edu", where username is your
username and post-office-server is the
post office server on which your e-mail account resides.
For example,
johndoe@po6.mit.edu.
NOTE: Be sure to enter this in all lower case.
**********************************************
KERBEROS
For any of the following categories that already have entries, replace
the entry with the appropriate setting. For any of the following categories
that are blank,
simply enter the appropriate setting .
Under POP3 Port, enter 1109
Under Realm, enter ATHENA.MIT.EDU (NOTE: Be sure this is in all
UPPER case.)
Under Service Name, enter pop (NOTE: Be sure this is in all lower
case.)
Under Service Format, enter %1.%4@%3
-----------------------------------
I presume that you know that the Kerberos Principal is available for use
immediately after the registration procedure is completed, but an Athena
account and/or mit.edu POP service for email will not be available until
the following day.
Don
========================================================
Donald R. Nelson
Systems Manager
Plasma Science and Fusion Center
Massachusetts Institute of Technology
175 Albany St., NW17-272
Cambridge, MA 02139
dnelson@psfc.mit.edu
(617) 253-7616
========================================================
