incorrect server principal in TGS-REQ

Love Hörnquist Åstrand lha at kth.se
Fri Nov 17 05:57:16 GMT 2006


17 nov 2006 kl. 01.25 skrev Andrew Bartlett:

> On Fri, 2006-11-17 at 00:14 +0100, Rafal Szczesniak wrote:
>> Andrew,
>>
>> While kerberos AS-REQ is sent with correct (ie. set from command line
>> argument) realm, I still have incorrect one in TGS-REQ. Tracing this
>> code a little bit I found that it is connected with inability to find
>> some particular server's realm name (krb5_sname_to_principal). That's
>> the place where kerberos code still uses default realm instead of
>> what's been passed in command line.
>
> Hmm.

Windows seems have this habit of sending the first tgs-req to the  
local realm
and trust referrals to redirect the client to the right place.

Love




More information about the samba-technical mailing list