A Kerberos realm is always in uppercase [1]. If you did *everything* with a lowercase realm name I suspect things might work but perhaps not.
Or, based on the second error, perhaps there is a DNS issue? Mike [1] The realm is effectively the DNS domain in uppercase and therefore it is not uncommon to see lowercase names (e.g. DNS oriented software). On Mon, 21 Aug 2006 17:00:03 +0800 "lizhong" <[EMAIL PROTECTED]> wrote: > I'm trying to test with gss-client and gss-server but am unsuccessful in > getting it to work. > > I have setup a MIT Realm called test.com and added a client named test/[EMAIL > PROTECTED] > I am able to kinit and get a ticket from the KDC. > > [EMAIL PROTECTED] gss-sample]# kinit > Password for test/[EMAIL PROTECTED]: > kinit(v5): Password incorrect while getting initial credentials > [EMAIL PROTECTED] gss-sample]# klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: test/[EMAIL PROTECTED] > > Valid starting Expires Service principal > 08/21/06 15:45:15 08/22/06 15:45:15 krbtgt/[EMAIL PROTECTED] > > > Kerberos 4 ticket cache: /tmp/tkt0 > klist: You have no tickets cached > [EMAIL PROTECTED] gss-sample]# > > But if I run "gss-server -port 8888 -verbose -once test/[EMAIL PROTECTED]", I > met the following error: > > [EMAIL PROTECTED] gss-sample]# ./gss-server -port 8888 -verbose -once > test/[EMAIL PROTECTED] > GSS-API error acquiring credentials: An invalid name was supplied > GSS-API error acquiring credentials: Hostname cannot be canonicalized > > I guess I used the service name in an improper way. So what service name > should I use? Thank you for any help! > > > -- Michael B Allen PHP Active Directory SSO http://www.ioplex.com/ ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
