[32966] in Kerberos
Strange klist output, missing realm in service principal name
daemon@ATHENA.MIT.EDU (Andreas Ntaflos)
Thu Dec 16 23:58:47 2010
From: Andreas Ntaflos <daff@pseudoterminal.org>
To: kerberos@mit.edu
Date: Fri, 17 Dec 2010 06:01:28 +0100
MIME-Version: 1.0
Message-Id: <201012170601.32422.daff@pseudoterminal.org>
Content-Type: multipart/mixed; boundary="===============0280546913=="
Errors-To: kerberos-bounces@mit.edu
--===============0280546913==
Content-Type: multipart/signed; boundary="nextPart1798037.jSJdF9ILW1";
protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
--nextPart1798037.jSJdF9ILW1
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi all,=20
I am wondering what (if anything) is wrong with the following output=20
from klist. This is after authenticating against a kerberized Apache=20
server with Firefox and negotiation enabled:
$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: daff@EXAMPLE.COM
Valid starting Expires Service principal
12/17/10 05:47:13 12/17/10 15:47:13 krbtgt/EXAMPLE.COM@EXAMPLE.COM
renew until 12/18/10 05:50:05
12/17/10 05:47:45 12/17/10 15:47:13 HTTP/dev.example.com@
renew until 12/18/10 05:50:05
12/17/10 05:47:45 12/17/10 15:47:13 HTTP/dev.example.com@EXAMPLE.COM
renew until 12/18/10 05:50:05
Notice the first HTTP entry, the realm part after the "@" is missing. I=20
don't know for sure but this looks wrong to me. No example output of=20
klist I have ever seen when reading docs or googleing looked like this.=20
However, everything seems to be working fine, i.e. logging into the=20
website works without extra password prompts from the browser, as=20
expected.=20
Any ideas what, if anything, is the problem here?
Thanks,=20
Andreas
--nextPart1798037.jSJdF9ILW1
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEABECAAYFAk0K7qkACgkQOXziqAkMqbQajACgw4tsO6bfInnRGDTKayp8jvTU
ehcAnjyuItsOy4WSB55o/qlVBT0bOa6J
=YmJd
-----END PGP SIGNATURE-----
--nextPart1798037.jSJdF9ILW1--
--===============0280546913==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0280546913==--