Re: GSSAPI doesn't play nice with non-canonical host names

On Sun, Jan 27, 2008 at 09:32:54PM -0500, Stephen Frost wrote:
> 
> > While I'm complaining: that's got to be one of the least useful error
> > messages I've ever seen, and it's for a case that's surely going to be
> > fairly common in practice.  Can't we persuade GSSAPI to produce
> > something more user-friendly?  At least convert "7" to "Server not
> > found in Kerberos database"?
> 
> I agree, and have found it to be very frustrating while working w/
> Kerberos in general.  I *think* there's a library which can convert
> those error-codes (libcomm-err?), but I've not really looked into it
> yet.

AFAIK, that one is for Kerberos only. For GSSAPI, we already use the
gss_display_status function to get the error messages. I think the problem
here is in the Kerberos library?

//Magnus