Re: heimdal 0.7.2 with Windows 2003 KDC

[michel.brabants@euphonynet.be]

Hello all,

thank you for the information. I have the domainname in uppercase, so that
shoulddn't be a problem. Howver, I found the following problem in the
KIT-maillinglist:
http://mailman.mit.edu/pipermail/kerberos/2005-September/008514.html.

It would be very helpfull to have a debugging-option. Is therd one?

Thank you,

Michel

>> some more information: when I type in a wrong password, I het
>> "pre-authentication failed". When I type in the correct password, I get
>> password incorrect.
>
> I could reproduce the same error. I guess it has do with the spelling of
> the realm-name (upper/lower case letters): I accidentally did a kinit with
> one letter of the realm-name *not* in uppercase and got exactly the same
> behaviour (also against a Win2003 DC). Then I did the same thing but with
> wrong cases in the principal-name: Here the password was accepted.
>
> Although the DNS-domain-name of a Windows-domain might be mixed case or
> lower case, the realm-name is still treated in upper case.
>
>
> Thomas
>