>>Or am I thinking wrong: Does kinit parse the user principal name into client >>and realm? >>Should I rename my realm to lowercase fedidcard.gov?
> Its either 12001000550...@fedidcard.gov or its 12001000550...@fedidcard.gov That it is. Deleting the realm and recreating a lowercase realm fixed the issue. (I can't change the smart cards.) Now I probably should make sure that everyone's UPN is from the same realm... Thanks all, Bryce ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos