Public bug reported:
See RedHat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518.
Quoting:
Certain versions of the KDC software (included for example
in Red Hat Enterprise Linux 2.1 and 3) reject requests,
which include KDC options the software does not recognize,
and do not support the "canonicalize" option. When a client
was configured to use one of these versions of the KDC
software, the client failed to obtain credentials for
authentication to other services. This interoperability
regression was introduced in the update to Red Hat
Enterprise Linux 6.1. With this update, an upstream patch
has been provided to fix this bug.
I have applied the patch provided on this bugzilla page, and this fixed
the problem.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 14 15:56:20 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
SourcePackage: krb5
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago)
** Affects: krb5 (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-bug i386 oneiric running-unity
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/874130
Title:
Canonicalize fallback only works for different realm (MITKRB RT #6917)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
