[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPv6

>>>>> "Brian" == Brian May <bam@snoopy.apana.org.au> writes:

    Brian> [ Trying mutual KERBEROS5 ... ] Kerberos V5: mk_req failed
    Brian> (Cannot determine realm for host) [ Trying KERBEROS5 ... ] 
    Brian> Kerberos V5: mk_req failed (Cannot determine realm for
    Brian> host)

This looks a bit weird to me:

18:13:08.294037 dewey.chocbit.org.au.1024 > snoopy.chocbit.org.au.domain: 14176+ TXT? krb5-realm.fe80::280:c7ff:feb7:8a8f. (53)
18:13:08.294928 snoopy.chocbit.org.au.domain > dewey.chocbit.org.au.1024: 14176 NXDomain 0/1/0 (129) (DF)
18:13:08.295831 dewey.chocbit.org.au.1024 > snoopy.chocbit.org.au.domain: 14177+ TXT? _kerberos.fe80::280:c7ff:feb7:8a8f. (52)
18:13:08.296268 snoopy.chocbit.org.au.domain > dewey.chocbit.org.au.1024: 14177 NXDomain 0/1/0 (128) (DF)
18:13:08.298806 dewey.chocbit.org.au.1024 > snoopy.chocbit.org.au.domain: 14178+ (89)
18:13:08.299212 snoopy.chocbit.org.au.domain > dewey.chocbit.org.au.1024: 14178 NXDomain 0/1/0 (151) (DF)
18:13:08.300268 dewey.chocbit.org.au.1024 > snoopy.chocbit.org.au.domain: 14179+ TXT? krb5-realm.fe80::280:c7ff:feb7:8a8f. (53)
18:13:08.300546 snoopy.chocbit.org.au.domain > dewey.chocbit.org.au.1024: 14179 NXDomain 0/1/0 (129) (DF)
18:13:08.301365 dewey.chocbit.org.au.1024 > snoopy.chocbit.org.au.domain: 14180+ TXT? _kerberos.fe80::280:c7ff:feb7:8a8f. (52)
18:13:08.301634 snoopy.chocbit.org.au.domain > dewey.chocbit.org.au.1024: 14180 NXDomain 0/1/0 (128) (DF)


where DNS lookups are conducted for:
krb5-realm.fe80::280:c7ff:feb7:8a8f
_kerberos.fe80::280:c7ff:feb7:8a8f
krb5-realm.fe80::280:c7ff:feb7:8a8f
_kerberos.fe80::280:c7ff:feb7:8a8f


on a computer with a IPv6 address of fe80::280::c7ff::feb7::8a8f

It looks like instead of
<krb5-realm>.<domain name>

It looks for
<krb5-realm>.<ip6 address>

It can't find the information in /etc/krb5.conf either, for probably a
similar reason.
-- 
Brian May <bam@snoopy.apana.org.au>