Displaying 1 result from an estimated 1 matches for "enotmynameinticketgoaway".
2007 Sep 14
1
GSSAPI vs load-balanced servers - anything we can do?
...(ipA)
(KEX and other wonderful SSH stuff)
do GSSAPI auth
gethostbyname(clustername) -> ipB
gethostbyaddr( ipB) -> nameB
get service ticket for host/nameB.domain at REALM
send ticket to connected machine (nameA)
server: huh? Enotmynameinticketgoaway.
The GSSAPI behaviour is apparently mandated by RFC1964 (2.1.3):
> When a reference to a name of this type is resolved, the "hostname"
> is canonicalized by attempting a DNS lookup and using the fully-
> qualified domain name which is returned, or by using the "hos...