Re: [Perlgssapi-users] gss_nt_service_name

[David L. <Dav...@qu...>]

Oops, you're right; that's what happens when I fire off hasty emails! :-(
ok, I see that gss_nt_service_name means GSS_C_NT_HOSTBASED_SERVICE..

So, then the krb5 principal ipmi/IT-CC would have to be specified as ipmi@IT-CC ...
or he could change the example scripts to use gss_nt_krb5_principal instead of gss_nt_service_name.
How does that sound?

d


Achim Grolms wrote:
> On Friday 22 September 2006 11:02, David Leonard wrote:
>   
>> Try setting the environment variable KRB5_KTNAME=/etc/ipmi.keytab when
>> you run your server
>>     
>
> 1. Massimiliano's problem starts on clientside, because the client
>    can not get a GSSAPI-Token from KDC because GSSAPI tries to lookup the  
>    hostnamepart (because of gss_nt_service_name is used). 
>    No keytab is needed on clientside!
>
> 2. on Serverside the 
>    gss-server.pl script has a -keytabfile
>    option to set keytab directly (Massimiliano knows how to use).
>
> Thanky you,
> Achim
>
>
>