AFP548 Changing the world one server at a time.

Help – 127.0.0.1 added to realm name in AuthenticationAuthority attribute

Home › Forums › OS X Server and Client Discussion › Open Directory › Help – 127.0.0.1 added to realm name in AuthenticationAuthority attribute

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #369360
    AndrewMac
    Participant

    Some of the users I’m creating manually in WGM have some extra text in their AuthenticationAuthority attribute. Specifically, “127.0.0.1” gets appended to the KDC’s (or ODM’s, same box) domain name / realm name. Like this…

    First, here’s a valid AuthenticationAuthority attribute:

    ;Kerberosv5;0x467ff3c62766e16b0000000c0000000c;u5@COLX01.SD54.K12.IL.US;COLX01.SD54.K12.IL.US;1024 35 172002164541737449333833378346104778130026455115110587549838767307397149868755989830719221795635820059940707848749689216678699143872243728979530899017106285141695064886155351963398349346721132834793903014786576901621994139570832654671167446956241043799250263387270965238608922673162372878993005727012262611791 root@colx01.sd54.k12.il.us:10.135.0.1

    And here’s a bad one. Notice the 127.0.0.1 at the end of the ODM/KDC’s domain name:

    ;Kerberosv5;0x467ff3cc6adc6bd00000000d0000000d;u6@COLX01.SD54.K12.IL.US127.0.0.1;COLX01.SD54.K12.IL.US127.0.0.1;1024 35 172002164541737449333833378346104778130026455115110587549838767307397149868755989830719221795635820059940707848749689216678699143872243728979530899017106285141695064886155351963398349346721132834793903014786576901621994139570832654671167446956241043799250263387270965238608922673162372878993005727012262611791 root@colx01.sd54.k12.il.us:10.135.0.1

    Any idea what would cause that to show up for some users, but not others?

    Thanks

    #369361
    AndrewMac
    Participant

    As a followup, I have also seen “diradmin” and “********” appended to the domain name, but only for users that I manually enter. If I import a list of users, this does not happen.

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.