[27676] in Kerberos
Re: UNKNOWN_SERVER - Server not ,found in Kerberos database
daemon@ATHENA.MIT.EDU (Edward Murrell)
Wed Apr 18 17:25:39 2007
Message-ID: <46268C47.4060804@dlconsulting.com>
Date: Thu, 19 Apr 2007 09:23:19 +1200
From: Edward Murrell <edward@dlconsulting.com>
MIME-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <4626888B.9020704@kickflop.net>
X-SA-Exim-Mail-From: edward@dlconsulting.com
Reply-To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Blaine wrote:
> Jeffrey Altman wrote:
>
>>> tkt=1 ses=1}, jblaine@rcf.foo.com for afs@rcf.foo.com
>>>
>> Do you really have a lowercased realm?
>>
>
> Yes. No good?
>
Not for the best. Active Directory assumes upper case everything for
example.
The FAQ at
http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html#realms says;
"The convention to use uppercase for realms names arose out of the
desire to easily distinguish between DNS domain names (which are
actually case-insensitive) and Kerberos realms. The Kerberos realm name
/is/ case sensitive (the realm foo.org is different than the realm
FOO.ORG). You are not required to have an uppercase Kerberos realm, but
I would strongly advise it.
It is worth noting that the recent revisions to the Kerberos standard
have specified that uppercase realm names are preferred and lowercase
realm names have been depreciated."
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
