On Friday, April 01, 2005 07:23:37 PM -0800 Darren Hoch <[EMAIL PROTECTED]> wrote:
kadmin: lisprincs <snip> krbtgt/[EMAIL PROTECTED] krbtgt/[EMAIL PROTECTED] krbtgt/[EMAIL PROTECTED]
The second components of each of these principal names must exactly match the name of the realm involved, including case. So, for example, for a client in the EXAMPLE1.COM realm to authenticate to a service in the EXAMPLE.COM realm, you need krbtgt/[EMAIL PROTECTED] to exist. Of course, it needs to exist in both realms and have the same key and kvno in both places.
-- Jeffrey T. Hutzelman (N3NHS) <[EMAIL PROTECTED]> Sr. Research Systems Programmer School of Computer Science - Research Computing Facility Carnegie Mellon University - Pittsburgh, PA
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
