[cifs-protocol] 114121712176508 MS-KILE Behaviour for client principal name in service tickets

Andrew Bartlett abartlet at samba.org
Tue Feb 17 21:30:50 MST 2015


On Wed, 2015-02-18 at 04:19 +0000, Sreekanth Nadendla wrote:
> Andrew,  when you execute kinit user at SHORTDOMAIN, the outgoing AS
> request uses string user at SHORTDOMAIN as Cname but still would be sent
> with proper realm name i.e. Crealm is still
> WIN2012R2.ABARTLET.WGTN.CAT-IT.CO.NZ. 

No, it isn't.  I'm not talking about enterprise here, these are normal
KRB5_NT_PRINCIPAL names.

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the cifs-protocol mailing list