Colleagues, Is it a bad thing to use IP literals as Kerberos principals? However, I am curious. When I try to "ssh [email protected]", a very strange ticket is being requested from the KDC:
2010-12-13T09:14:15 TGS-REQ [email protected] from IPv4:10.14.134.125 for krbtgt/[email protected] 2010-12-13T09:14:15 Server not found in database: krbtgt/[email protected]: No such entry in the database 2010-12-13T09:14:15 Failed building TGS-REP to IPv4:10.14.134.125 What exactly is "krbtgt/14.134.5" ? Why only the last 3 octets of the address? The implementation is Heimdal 1.1.0 from the FreeBSD base system. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/4...@fidonet http://vas.tomsk.ru/ ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
