Comment by simo:
You simply do not specify the realm name. In gssapi you use hostbased service names in the form of: HTTP@fully.qualified.name and you let the KDC return a referral if the service belongs to a different domain (or let the krb5 client libraries decide which realms servers that server).
attachment 0001-Ticket-48790-gssapi-should-accept-different-realm-na.patch
commit 5fe21706ca05f0a57eb5e3a172c8e0de90d3232b Writing objects: 100% (4/4), 644 bytes | 0 bytes/s, done. Total 4 (delta 3), reused 0 (delta 0) To git+ssh://git.engineering.redhat.com/srv/git/users/mareynol/rest389.git 71cab48..5fe2170 master -> master
Metadata Update from @firstyear: - Issue assigned to firstyear - Issue set to the milestone: rest389 1.0
389-ds-base is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in 389-ds-base's github repository.
This issue has been cloned to Github and is available here: - https://github.com/389ds/389-ds-base/issues/1850
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Metadata Update from @spichugi: - Issue close_status updated to: wontfix (was: Fixed)
Login to comment on this ticket.