[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
MIT kerberos gss-client on win! pls help
> hi all,
> i am facing a problem in running MIT gss-client on Windows NT.its
> giving following problem
>
> GSS-API error initializing context: Miscellaneous failure
> GSS-API error initializing context: Generic error (see e-text)
>
> KDC is running on Solaris machine
> host name and service name is in lower case
> i will be very thankful to you! pls help
> regards
> G. BRAR
>
>
>
>
> At 05:35 PM 11/15/00 +0100, Norbert Klasen wrote:
> >Hi,
> >the GSSAPI mechanism included in the IBM SecureWay Directory Client SDK
> >uses tickets in which the service component of the server principal is
> >in capital letters, i.e. LDAP/server@REALM.
> >OpenLDAP (with Cyrus SASL and MIT krb5) expects the service to be in
> >lower case though, i.e. ldap/server@REALM, and thus aborts with
> >"gss_accept_sec_context: Miscellaneous failure; Wrong principal in
> >request;"
> >rfc1510, 7.2.1 states that the hostname must be in lower case, but what
> >about the service name? It should be lower case as well. Kurt
>