Simon Wilkinson wrote:
> On 22 Nov 2006, at 23:54, Dax Kelson wrote:
>> Simon, this problem keeps cropping up in various situations. What
>> the service principal be when FQDN != Jabber domain?
> Currently, the host portion of the service principal name should be
> the canonical name of the host that you are connecting to. This will
> change when domain-based-naming becomes widely available, but it is
> currently the only scalable solution (and, yes, it does place trust
> in the SRV records received from the DNS)
I haven't looked on my KDC yet, but based on this error from gaim debug:
sasl: GSSAPI Error: Unspecified GSS failure. Minor code may provide
more information (Server not found in Kerberos database)
I'm guessing the current code is not doing as you suggest.