Strange klist output, missing realm in service principal name

  • Follow


--nextPart1798037.jSJdF9ILW1
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,=20

I am wondering what (if anything) is wrong with the following output=20
from klist. This is after authenticating against a kerberized Apache=20
server with Firefox and negotiation enabled:

$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: daff@EXAMPLE.COM

Valid starting     Expires            Service principal
12/17/10 05:47:13  12/17/10 15:47:13  krbtgt/EXAMPLE.COM@EXAMPLE.COM
        renew until 12/18/10 05:50:05
12/17/10 05:47:45  12/17/10 15:47:13  HTTP/dev.example.com@
        renew until 12/18/10 05:50:05
12/17/10 05:47:45  12/17/10 15:47:13  HTTP/dev.example.com@EXAMPLE.COM
        renew until 12/18/10 05:50:05

Notice the first HTTP entry, the realm part after the "@" is missing. I=20
don't know for sure but this looks wrong to me. No example output of=20
klist I have ever seen when reading docs or googleing looked like this.=20
However, everything seems to be working fine, i.e. logging into the=20
website works without extra password prompts from the browser, as=20
expected.=20

Any ideas what, if anything, is the problem here?

Thanks,=20

Andreas

--nextPart1798037.jSJdF9ILW1
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAk0K7qkACgkQOXziqAkMqbQajACgw4tsO6bfInnRGDTKayp8jvTU
ehcAnjyuItsOy4WSB55o/qlVBT0bOa6J
=YmJd
-----END PGP SIGNATURE-----

--nextPart1798037.jSJdF9ILW1--
0
Reply daff2865 (15) 12/17/2010 5:01:28 AM


0 Replies
12 Views

(page loaded in 0.027 seconds)

11/20/2012 4:38:35 AM


Reply: