Re: [Perlgssapi-users] gss_nt_service_name

[Achim G. <ac...@gr...>]

On Thursday 21 September 2006 17:34, Massimiliano Masi wrote:

> What is the problem? What is the gss_nt_service_name for?

"MINOR::Server not found in Kerberos database"

the hostname-part in principal must match the canonical hostname.
(For example in case of CNAME-Record the Record the CNAME points to.
Or in case of A record the name resultinge in a reverse an a forward lookup.

Whats the hostname part of

ipmi/IT...@CE....

?

I think you want to create principal

ipmi/lxd...@CE...

in Kerberos5, in GSSAPI syntax that's

ip...@lx...


But as far I can see from DNS lxdev23.cern.ch
is OK.

Ensure DNS an /etc/hosts and that stuff are configured properly on your 
machine!

Use kvno to check if you can get tickets for your new servicename.
use kinit command to use the keytab for authentication
(As a test that keytab works fine)

Most of the hints I have added to
<http://www.grolmsnet.de/kerbtut/>

may be helpfull for debugging.




Achim