The gethostbyname()
routine is broken; it does not return a fully
qualified domain name, even if you are using the Domain Name Service
routines. Since Kerberos V5 uses the fully qualified domain name as the
second component of a service principal (i.e,
host/tsx-11.mit.edu@ATHENA.MIT.EDU
), this causes problems for servers
who try to figure out their own fully qualified domain name.
Workarounds:
hosts: files dns
and then in /etc/hosts, make sure there is a line with your workstation's IP address and hostname, with the fully qualified domain name first. Example:
18.172.1.4 dcl.mit.edu dcl
Note that making this change may cause other programs in your environment to break or behave differently.