Brian Lavender <[EMAIL PROTECTED]> writes:

> Do I have to create a principal for a service? I created a host
> principal and then a service principal, and then I added them to my
> keytab, but I am not sure if I had to add the service principal. This is
> for current Kerberos 5 from MIT.

> This is what I did.

> addprinc host/[EMAIL PROTECTED]
> addprinc ftp/[EMAIL PROTECTED]
> ktadd host/[EMAIL PROTECTED] 
> ktadd ftp/[EMAIL PROTECTED]

> Is it necessary to add the service?

It depends entirely on what your ftp server and client are using to do
authentication.  It looks like the version that comes with MIT tries
ftp/hostname.example.com and then falls back on host/hostname.example.com
if the former doesn't exist.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to