Markus Moeller wrote: > Thomas, > > thank you for the pointer. I found my problem and it was related to having a > duplicated entry in another domain (uat.example.com) which I forgot about. I > had > > > EXAMPLE.COM > / | \ > / | \ > TEST.EXAMPLE.COM | PROD.EXAMPLE.COM > | > UAT.EXAMPLE.COM > > So when a client in prod.example.com was looking for > HTTP/server2.example.com the request was send to PROD.EXAMPLE.COM which > checked if EXAMPLE.COM knew about ONE entry and in this case there were more > than one entry available which forced PROD.EXAMPLE.COM to return unknown > principal. ( At least that is what I think happened ) > > Does anybody know a link from Microsoft how the sever referrals work ? It > doesn't seem to follow the draft. > > Thank you > Markus Markus:
The Microsoft referrals extensions date back to 1999. You will need to a copy of the draft that dates back to that time frame. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
