Re: [modauthkerb] Re: No principal in keytab matches desired name

[Henry B. H. <ho...@jp...>]

On Feb 12, 2006, at 1:24 PM, Martijn Dekkers wrote:

> Achim Grolms <achim <at> grolmsnet.de> writes:
>
>>
>> On Saturday 11 February 2006 18:19, Martijn Dekkers wrote:
>>
>>> HTTP/sso.complinet.local <at> COMPLINET.LOCAL
>

>    3 HTTP/spnego.complinet.local@COMPLINET.LOCAL (DES cbc mode with  
> RSA-MD5)

sso != spnego

Don't look like they match to me.

The name you use must match what you get from a reverse lookup of the  
IP number.  CNAME's and virtual hosts don't count.  (Also you need to  
get the same answer on the client as the server itself, which is why  
you need to watch what you put in /etc/hosts.)
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Hen...@jp..., or hb...@ox...