[Bug 571572] Re: krb5 prefers the reverse pointer no matter what for locating service tickets.

William 571572 at bugs.launchpad.net
Wed Feb 27 09:39:12 UTC 2013


Raring:
kinit testuser
klist
==========================================================================================================
Default principal: testuser at EXAMPLE.COM

Valid starting    Expires           Service principal
27/02/2013 08:28  27/02/2013 18:28  krbtgt/EXAMPLE.COM at EXAMPLE.COM
    renew until 28/02/2013 08:28
==========================================================================================================
requesting sharepointsite.testdomain with firefox with the following option set in about:config
network.negotiate-auth.trusted-uris "https://, http://"
No tickets without option rdns=false
popup window for authentication
klist
==========================================================================================================
Default principal: testuser at EXAMPLE.COM

Valid starting    Expires           Service principal
27/02/2013 08:28  27/02/2013 18:28  krbtgt/EXAMPLE.COM at EXAMPLE.COM
    renew until 28/02/2013 08:28
==========================================================================================================

option rdns=false
requesting sharepointsite.testdomain
klist
==========================================================================================================
Default principal: testuser at EXAMPLE.COM

Valid starting    Expires           Service principal
27/02/2013 07:23  27/02/2013 17:23  krbtgt/EXAMPLE at EXAMPLE.COM
    renew until 28/02/2013 07:23
27/02/2013 07:24  27/02/2013 17:23  HTTP/sharepointsite.testdomain@
    renew until 28/02/2013 07:23
27/02/2013 07:24  27/02/2013 17:23  HTTP/sharepointsite.testdomain at EXAMPLE.COM
    renew until 28/02/2013 07:23
==========================================================================================================

So adding option rdns=false works for default raring install

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/571572

Title:
  krb5 prefers the reverse pointer no matter what for locating service
  tickets.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/571572/+subscriptions



More information about the Ubuntu-server-bugs mailing list