Case sensitivity in Kerberos principal names.
Christopher R. Hertel
crh at ubiqx.mn.org
Fri Mar 10 07:42:36 GMT 2006
Andrew Bartlett wrote:
>>The problem seems to be the case of the principal. The Celerra goes
>>against the grain by sending principal names in the form NAME at realm (that
>>is, UPPER at lower). The Windows KDC will "canonicalize" the name changing it
>>to name at REALM (that is, lower at UPPER).
> A well known behaviour.
Which, the behavior of the Windows KDC or the odd choice of capitalization
from the server?
> I'll assert that it would be far, far easier for one commercial NAS
> device to check AD for the correct case than for all the Linux and Apple
> MAC clients in the world to change behaviour.
My feelings as well, but I need to convince the vendor that it is worth
Thanks ever so much!
"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team -- http://www.samba.org/ -)----- Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/ -)----- ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)----- crh at ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/ -)----- crh at ubiqx.org
More information about the samba-technical