|
|
Strange klist output, missing realm in service principal name
--nextPart1798037.jSJdF9ILW1
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi all,=20
I am wondering what (if anything) is wrong with the following output=20
from klist. This is after authenticating against a kerberized Apache=20
server with Firefox and negotiation enabled:
$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: daff@EXAMPLE.COM
Valid starting Expires Service principal
12/17/10 05:47:13 12/17/10 15:47:13 krbtgt/EXAMPLE.COM@EXAMPLE.COM
renew until 12/18/10 05:50:05
12/17/10 05:47:45 12/17/10 15:47:13 HTTP/dev.example.com@
renew until 12/18/10 05:50:05
12/17/10 05:47:45 12/17/10 15:47:13 HTTP/dev.example.com@EXAMPLE.COM
renew until 12/18/10 05:50:05
Notice the first HTTP entry, the realm part after the "@" is missing. I=20
don't know for sure but this looks wrong to me. No example output of=20
klist I have ever seen when reading docs or googleing looked like this.=20
However, everything seems to be working fine, i.e. logging into the=20
website works without extra password prompts from the browser, as=20
expected.=20
Any ideas what, if anything, is the problem here?
Thanks,=20
Andreas
--nextPart1798037.jSJdF9ILW1
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEABECAAYFAk0K7qkACgkQOXziqAkMqbQajACgw4tsO6bfInnRGDTKayp8jvTU
ehcAnjyuItsOy4WSB55o/qlVBT0bOa6J
=YmJd
-----END PGP SIGNATURE-----
--nextPart1798037.jSJdF9ILW1--
|
|
0
|
|
|
|
Reply
|
daff2865 (15)
|
12/17/2010 5:01:28 AM |
|
|
0 Replies
12 Views
(page loaded in 0.027 seconds)
|
|
|
|
|
|
|
|
|