Re: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-04 Thread misa416
On Jun 3, 1:58 pm, "Douglas E. Engert" wrote: > Chris wrote: > > This is perhaps a little higher-level problem than Kerberos proper but > > I wanted to at least see if I was taking the correct approach as far > > as Kerberos is concerned. > > > I have a service - it's a kerberized java webservice

Re: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Douglas E. Engert
Chris wrote: > This is perhaps a little higher-level problem than Kerberos proper but > I wanted to at least see if I was taking the correct approach as far > as Kerberos is concerned. > > I have a service - it's a kerberized java webservice with a very > specific function, and it does GSSAPI va

RE: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Paul Moore
word that you decide -Original Message- From: kerberos-boun...@mit.edu [mailto:kerberos-boun...@mit.edu] On Behalf Of Chris Sent: Tuesday, June 02, 2009 4:12 PM To: kerberos@mit.edu Subject: second keytab for similar service (but different SPN/IP) breaks the first This is perhaps a little highe

Re: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Michael B Allen
On Tue, Jun 2, 2009 at 7:12 PM, Chris wrote: > So it seems that with both Active Directory's Kerberos and Open > Directory's (MIT) Kerberos I cannot have two instances of "fooservice" > kerberized on different IP addresses against distinct SPN's associated > with the same service account.. You re

Re: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Ken Raeburn
On Jun 2, 2009, at 19:12, Chris wrote: > So it seems that with both Active Directory's Kerberos and Open > Directory's (MIT) Kerberos I cannot have two instances of "fooservice" > kerberized on different IP addresses against distinct SPN's associated > with the same service account... but there are

Re: second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Tom Yu
Chris writes: > This is perhaps a little higher-level problem than Kerberos proper but > I wanted to at least see if I was taking the correct approach as far > as Kerberos is concerned. > > I have a service - it's a kerberized java webservice with a very > specific function, and it does GSSAPI va

second keytab for similar service (but different SPN/IP) breaks the first

2009-06-03 Thread Chris
This is perhaps a little higher-level problem than Kerberos proper but I wanted to at least see if I was taking the correct approach as far as Kerberos is concerned. I have a service - it's a kerberized java webservice with a very specific function, and it does GSSAPI validation of client login re