Univention Bugzilla – Bug 31674
unable to obtain a kerberos ticket if username (kerberos principal) has spaces
Last modified: 2016-10-11 08:01:18 CEST
It is not possible to get a kerberos ticket for usernames with spaces. This applies to samba4 and heimdal kerberos. [2013/06/07 11:09:13, 3, pid=7672, effective(0, 0), real(0, 0)] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ test\ 1@FFF.GGG from ipv4:10.200.7.150:38031 for krbtgt/FFF.GGG@FFF.GGG [2013/06/07 11:09:13, 5, pid=7672, effective(0, 0), real(0, 0)] ../lib/ldb-samba/ldb_wrap.c:69(ldb_wrap_debug) ldb: ldb_trace_request: SEARCH dn: <rootDSE> scope: sub expr: (&(objectClass=user)(userPrincipalName=test\5C\201@FFF.GGG)) control: 1.2.840.113556.1.4.1340 crit:1 data:yes [2013/06/07 11:09:14, 3, pid=7672, effective(0, 0), real(0, 0)] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: UNKNOWN -- test\ 1@FFF.GGG: no such entry found in hdb
This issue has been filed against UCS 3.1. UCS 3.1 is out of maintenance and many UCS components have vastly changed in later releases. Thus, this issue is now being closed. If this issue still occurs in newer UCS versions, please reopen.