SOLUTION:
Solaris does strict TGT checking.
Sun's recommended solution to me was to set the following
to false:
verify_ap_req_nofail [true | false]
If true, the local keytab file (/etc/krb5/krb5.keytab)
must contain an entry for the local host principal,
I think that would be excellent.
> isc has been holding the kerberos.org domain name
> for some time now, mostly to prevent it from being
> squatted upon and used for ad revenue. we would be
> happy to put a wiki on it if that's the will of the
> community. but no ads, plz, other than point
Thu, Jan 18, 2007 at 03:41:05PM -0500, Chaskiel M Grundman wrote:
> --On Thursday, January 18, 2007 05:17:52 PM +0100 Ludek Finstrle
> <[EMAIL PROTECTED]> wrote:
>
> > GSSAPI error: Miscellaneous failure
> > GSSAPI mech specific error: Program called an obsolete, deleted function
>
> My guess wo
