Re: Case sensitivity in Kerberos principal names.

Jelmer Vernooij wrote:
> On Wed, 2006-11-29 at 12:31 -0500, Santy, Kimberly M wrote:
> > I've got commercial NAS device, acting as a CIFS server.  It's a member
> > of an AD domain that only accepts Kerberos Auth.  Windows clients are able
> > to authenticate and gain access to the CIFS shares without problems.
> >
> > Other clients--MacOS's SMB file system, the Linux CIFS VFS, and smbclient--
> > all fail with an error along the lines of:
> >
> >    spnego_gen_negTokenTarg failed: KDC reply did not match expectations
> As far as I've understood, CIFS VFS doesn't have support for Kerberos at
> all yet. Are you sure you're not confusing it with the older SMBFS 

Kerberos support in mount.cifs is an easy assumption to make, given that 
  the sec=krb5 option is documented in the man page.  But smbclient 
does function as it should with kerberos.  First thing to check is 
whether you have a valid ticket; after having run kinit, what does klist 
say?

-BT
--
Bjørn Tore Sund       Phone: 555-84894   Email:   bjorn.sund@xxxxxxxxx
IT department         VIP:   81724       Support: http://bs.uib.no
Univ. of Bergen

When in fear and when in doubt, run in circles, scream and shout.