[32970] in Kerberos
Re: Strange klist output, missing realm in service principal name
daemon@ATHENA.MIT.EDU (Andreas Ntaflos)
Fri Dec 17 13:59:07 2010
From: Andreas Ntaflos <daff@pseudoterminal.org>
To: Greg Hudson <ghudson@mit.edu>
Date: Fri, 17 Dec 2010 20:02:03 +0100
In-Reply-To: <1292564205.3219.32.camel@ray>
MIME-Version: 1.0
Message-Id: <201012172002.04255.daff@pseudoterminal.org>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: multipart/mixed; boundary="===============1100544405=="
Errors-To: kerberos-bounces@mit.edu
--===============1100544405==
Content-Type: multipart/signed; boundary="nextPart3404794.TjjPd8J6Kr";
protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
--nextPart3404794.TjjPd8J6Kr
Content-Type: Text/Plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
On Friday 17 December 2010 06:36:45 Greg Hudson wrote:
> On Fri, 2010-12-17 at 00:01 -0500, Andreas Ntaflos wrote:
> > Notice the first HTTP entry, the realm part after the "@" is
> > missing. I don't know for sure but this looks wrong to me.
>=20
> This is an artifact of the way host referrals were introduced in krb5
> 1.6.
[...]=20
> Two cache entries are created, one with the empty realm and one with
> the realm we actually got credentials in. This is so we don't have
> to perform a referral request a second time.
Thank you very much for this excellent explanation!
Andreas
--nextPart3404794.TjjPd8J6Kr
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEABECAAYFAk0Ls6wACgkQOXziqAkMqbQ/8wCgofqjZvsJ5bDZGMo8HEhtYrLr
z0AAnR+ejhpukcC4rntU/FdzyZvTKRbh
=GSEg
-----END PGP SIGNATURE-----
--nextPart3404794.TjjPd8J6Kr--
--===============1100544405==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1100544405==--
