[Date Prev][Date Next] [Chronological] [Thread] [Top]

MIT kerberos gss-client on win! pls help



> hi all,
> 	i am facing a problem in running MIT gss-client on Windows NT.its
> giving following problem 
> 
> 	GSS-API error initializing context: Miscellaneous failure
> 	GSS-API error initializing context: Generic error (see e-text)
> 	
> KDC is running on Solaris machine
> host name and service name is in lower case
> i will be very thankful to you! pls help
> regards
> G. BRAR
> 
> 	
> 
> 
> At 05:35 PM 11/15/00 +0100, Norbert Klasen wrote: 
> >Hi,
>  >the GSSAPI mechanism included in the IBM SecureWay Directory Client SDK 
> >uses tickets in which the service component of the server principal is
>  >in capital letters, i.e. LDAP/server@REALM.
>  >OpenLDAP (with Cyrus SASL and MIT krb5) expects the service to be in 
> >lower case though, i.e. ldap/server@REALM, and thus aborts with 
> >"gss_accept_sec_context: Miscellaneous failure; Wrong principal in 
> >request;"
>  >rfc1510, 7.2.1 states that the hostname must be in lower case, but what 
> >about the service name? It should be lower case as well. Kurt 
>