On Thursday, July 07, 2005 06:18:16 PM -0700 Phil Dibowitz <[EMAIL PROTECTED]> wrote:

On Thu, Jul 07, 2005 at 09:03:36PM -0400, Jeffrey Hutzelman wrote:


On Thursday, July 07, 2005 05:46:18 PM -0700 Phil Dibowitz
<[EMAIL PROTECTED]>  wrote:

> and the right tgt (based on Kerberos by Brian Tung), doesn't seem to be
> doing anything:
>
> [EMAIL PROTECTED]

This principal is meaningless, and is used for nothing.

> and the mystery ticket is doing everything:
>
> krbtgt/[EMAIL PROTECTED]

This principal is the local-realm ticket-granting service.

In other words, it's working exactly like it's supposed to.  It's
anyone's  guess where the meaningless principal came from.

So [EMAIL PROTECTED] is not what MIT krb uses as the TGT, it uses
krbtgt/[EMAIL PROTECTED] - just a discrepency between the MIT implimentation
and the Kerb book I have?

It's not what _anything_ uses, and so far as I can remember never has been. If the book says that, then either it's a typo or Brian was asleep when he wrote that part. :-)

-- Jeff
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to