I guess I should add-up that my test environment boxes are running Solaris
8, that nsswitch.conf is set to "hosts: dns files" and that my DNS server
is specified in resolv.conf (just to eliminate the newbie-debugging
stuff).

I tried looking up the ftpd source code, and the few variables I took a
look at contained the non-FQDN hostname at runtime. However, OpenSSH's
ssh, scp and sftp are all behaving that way too. From what I can tell,
GSSAPI is the only shared component between all of these.

Thanks and Happy Holidays,
Mathieu

In article <[EMAIL PROTECTED]>,
"Mathieu Nantel" <[EMAIL PROTECTED]> wrote:

> Good day,
> 
> I got this issue where most of the kerberized stuff will not work if the
> hostname in the HOSTS files is the non-FQDN version of the one in
> Kerberos and DNS. I.E.:
> 
> [HOSTS file]
> 10.1.2.3      myserver
> 
> [DNS]
> 10.1.2.3      myserver.mydomain.com
> 
> [Kerberos]
> host/myserver.mydomain.com
> 
> 
> Is there no way to tell the GSSAPI to use DNS for it's naming
> requirements?
> 
> I can't be certain that GSSAPI is the guilty component, but I noticed
> that kerberized rcp and telnet won't refuse the connection in the
> previously mentionned situation. I recall seeing in the Kerberos source
> that ftp is actually named GSS-FTP (hence my accusing finger at GSSAPI).
> 
> Sorry if that's already been answered...
> 
> Mathieu

Reply via email to