Re: kadm5_init_with_creds_ctx using the wrong server principal
Nico Williams <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <CAK3OfOi31227Q2ywsqEYZP7jK2+fhej=CzoQeJVfuAJSwJw6rg@mail.gmail.com> |
On Thu, Dec 15, 2011 at 2:44 PM, Russ Allbery <[email protected]> wrote: > Nico Williams <[email protected]> writes: >> Ultimately the string "kadmin/admin" here gets passed to >> krb5_parse_name(), and since there's no @REALM in the string, the >> library will just use the default realm to qualify the name. > > Right, but I *set* a default realm in the Kerberos context. Why is it not Ah, I missed that. > being used in krb5_parse_name()? Or is that not how krb5_parse_name() > works? No, it should have used that realm. I'm confused. Are you using master? Nico --