[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kinit and foreign (Japanese) names

On Tue, Aug 05, 2003 at 12:17:47PM -0400, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams@verizon.net> writes:
>     Nicolas> The Kerberos V protocol is not properly
>     Nicolas> internationalized.  There is an ongoing effort at the
>     Nicolas> IETF KRB WG to correct this.
>     Nicolas> Until such standards work is completed and implemented
>     Nicolas> you cannot expect non-ASCII Kerberos V principal names to
>     Nicolas> work interoperably.
> Yeah, although I cannot really think what's breaking here.  Possibly
> some salt handling issue?

Yeah.  And pre-auth failed indicates that the problem has to do with the
password, not the princ name.


 - is the user typing in the princ name and password in a UTF-8 locale?
 - was the password originally typed in in a UTF-8 locale (i.e., when it
   was last changed)?

 - when you use the kadmin tool to look at the principal record in a
   UTF-8 locale, does it render correctly?  How about in the C locale?