RE: Using Kerby kerb-client as an alternative for GSS-API.... Sgt Request fails

2017-05-08 Thread Zheng, Kai
Lamb [mailto:christopher.l...@ch.ibm.com] Sent: Tuesday, May 09, 2017 1:34 PM To: kerby@directory.apache.org Subject: Re: Using Kerby kerb-client as an alternative for GSS-API Sgt Request fails Hi all I can now retrieve the Tgt from the creds-cache, and request a Sgt. However I am now

Re: Using Kerby kerb-client as an alternative for GSS-API.... Sgt Request fails

2017-05-08 Thread Christopher Lamb
Hi all I can now retrieve the Tgt from the creds-cache, and request a Sgt. However I am now bouncing between 2 errors. "ERR BAD OPTION" and "ERR GENERIC". If I create the Tgt with the clientPrincipal, the request is rejected by the KDC with "ERR BAD OPTION". Examining the request with