[32966] in Kerberos

home help back first fref pref prev next nref lref last post

Strange klist output, missing realm in service principal name

daemon@ATHENA.MIT.EDU (Andreas Ntaflos)
Thu Dec 16 23:58:47 2010

From: Andreas Ntaflos <daff@pseudoterminal.org>
To: kerberos@mit.edu
Date: Fri, 17 Dec 2010 06:01:28 +0100
MIME-Version: 1.0
Message-Id: <201012170601.32422.daff@pseudoterminal.org>
Content-Type: multipart/mixed; boundary="===============0280546913=="
Errors-To: kerberos-bounces@mit.edu

--===============0280546913==
Content-Type: multipart/signed; boundary="nextPart1798037.jSJdF9ILW1";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit

--nextPart1798037.jSJdF9ILW1
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,=20

I am wondering what (if anything) is wrong with the following output=20
from klist. This is after authenticating against a kerberized Apache=20
server with Firefox and negotiation enabled:

$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: daff@EXAMPLE.COM

Valid starting     Expires            Service principal
12/17/10 05:47:13  12/17/10 15:47:13  krbtgt/EXAMPLE.COM@EXAMPLE.COM
        renew until 12/18/10 05:50:05
12/17/10 05:47:45  12/17/10 15:47:13  HTTP/dev.example.com@
        renew until 12/18/10 05:50:05
12/17/10 05:47:45  12/17/10 15:47:13  HTTP/dev.example.com@EXAMPLE.COM
        renew until 12/18/10 05:50:05

Notice the first HTTP entry, the realm part after the "@" is missing. I=20
don't know for sure but this looks wrong to me. No example output of=20
klist I have ever seen when reading docs or googleing looked like this.=20
However, everything seems to be working fine, i.e. logging into the=20
website works without extra password prompts from the browser, as=20
expected.=20

Any ideas what, if anything, is the problem here?

Thanks,=20

Andreas

--nextPart1798037.jSJdF9ILW1
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAk0K7qkACgkQOXziqAkMqbQajACgw4tsO6bfInnRGDTKayp8jvTU
ehcAnjyuItsOy4WSB55o/qlVBT0bOa6J
=YmJd
-----END PGP SIGNATURE-----

--nextPart1798037.jSJdF9ILW1--

--===============0280546913==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============0280546913==--

home help back first fref pref prev next nref lref last post