Re: kadm5_init_with_creds_ctx using the wrong server principal

On Thu, Dec 15, 2011 at 3:43 PM, Russ Allbery <[email protected]> wrote:
> Nico Williams <[email protected]> writes:
>
>> Do you have a packet capture?  Is there something to do with referrals?
>> (I so doubt it...)
>
> I don't have a packet capture; I walked through it in a debugger to figure
> out that it was trying to get the wrong principal, and it was kind of a
> mess getting to the right spot.

Well, just break in get_kadm_ticket() and print the in.server's realm
name after the call to krb5_parse_name().  Then if that's correct then
step into krb5_get_credentials() and see what's going on there.