Re: kadm5_init_with_creds_ctx using the wrong server principal
Russ Allbery <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | The Eyrie |
| Message-ID | <[email protected]> |
Nico Williams <[email protected]> writes: > On Thu, Dec 15, 2011 at 3:43 PM, Russ Allbery <[email protected]> wrote: >> I don't have a packet capture; I walked through it in a debugger to >> figure out that it was trying to get the wrong principal, and it was >> kind of a mess getting to the right spot. > Well, just break in get_kadm_ticket() and print the in.server's realm > name after the call to krb5_parse_name(). Then if that's correct then > step into krb5_get_credentials() and see what's going on there. This turned out to be a bug in my program that was shadowing the Kerberos context in which the realm was being set with another one, which I finally tracked down after digging into this further. Thanks for your help! -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/>