[19384] in Kerberos_V5_Development
Re: "gss_import_name()" and "default_realm"
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Mar 23 15:34:41 2016
To: Kevin <kevin.guillemot@laposte.net>, krbdev@mit.edu
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <56F2EFC8.8070604@mit.edu>
Date: Wed, 23 Mar 2016 15:34:32 -0400
MIME-Version: 1.0
In-Reply-To: <1458681466917-45171.post@n3.nabble.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 03/22/2016 05:17 PM, Kevin wrote:
> Again, All is working fine ! (On Debian....)
>
> Indeed, when I try to use that script on a FreeBSD 10.1, I meet the
> following problem :
This probably isn't the best list to ask. krbdev@mit.edu is for
discussion about the development of MIT krb5, whereas this question
appears to be a user question about Heimdal (assuming you are using the
native Kerberos binaries on FreeBSD). heimdal-discuss@sics.se is
appropriate for questions about Heimdal. Alternatively,
kerberos@mit.edu is appropriate for questions about any Kerberos
implementation. For simplicity, I will try to answer here anyway.
For the FreeBSD machine, you might find it sufficient to add
[domain_realm] directives to krb5.conf like so:
[domain_realm]
.testing.tr = TESTING.TR
.kerberos.tr = KERBEROS.TR
Another option is to change your Python script to pass an empty string
("") to authGSSServerInit(). That should allow the server to receive
authentications to any service in the keytab--although you may need to
check which one the client authenticated to using authGSSServerTargetName().
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
