[linux-cifs-client] Case sensitivity in Kerberos principal names.

[Bjoern Tore Sund]

Jelmer Vernooij wrote:
> On Wed, 2006-11-29 at 12:31 -0500, Santy, Kimberly M wrote:
>> I've got commercial NAS device, acting as a CIFS server.  It's a member
>> of an AD domain that only accepts Kerberos Auth.  Windows clients are able
>> to authenticate and gain access to the CIFS shares without problems.
>>
>> Other clients--MacOS's SMB file system, the Linux CIFS VFS, and smbclient--
>> all fail with an error along the lines of:
>>
>>    spnego_gen_negTokenTarg failed: KDC reply did not match expectations
> As far as I've understood, CIFS VFS doesn't have support for Kerberos at
> all yet. Are you sure you're not confusing it with the older SMBFS 

Kerberos support in mount.cifs is an easy assumption to make, given that 
   the sec=krb5 option is documented in the man page.  But smbclient 
does function as it should with kerberos.  First thing to check is 
whether you have a valid ticket; after having run kinit, what does klist 
say?

-BT
-- 
Bjørn Tore Sund       Phone: 555-84894   Email:   bjorn.sund at it.uib.no
IT department         VIP:   81724       Support: http://bs.uib.no
Univ. of Bergen

When in fear and when in doubt, run in circles, scream and shout.