Re: ssh to IP literal

2010-12-13 Thread Victor Sudakov
Russ Allbery wrote: > > Is it a bad thing to use IP literals as Kerberos principals? > Well, it poses a problem for domain to realm mappings, as you've seen. > > However, I am curious. When I try to "ssh u...@10.14.134.5", a very > > strange ticket is being requested from the KDC: > > 2010-12-13

Re: ssh to IP literal

2010-12-13 Thread Nicolas Williams
On Mon, Dec 13, 2010 at 01:03:17PM -0500, Greg Hudson wrote: > On Mon, 2010-12-13 at 00:34 -0500, Russ Allbery wrote: > > Well, it poses a problem for domain to realm mappings, as you've seen. > > What Russ says is true, but on top of that, the Kerberos library also > needs to know what service ti

Re: ssh to IP literal

2010-12-13 Thread Greg Hudson
On Mon, 2010-12-13 at 00:34 -0500, Russ Allbery wrote: > Well, it poses a problem for domain to realm mappings, as you've seen. What Russ says is true, but on top of that, the Kerberos library also needs to know what service ticket to ask for. It's likely that the client tried to get tickets for