case of service component in server principals

[Norbert Klasen <klasen@zdv.uni-tuebingen.de>]

Hi,
the GSSAPI mechanism included in the IBM SecureWay Directory Client SDK
uses tickets in which the service component of the server principal is
in capital letters, i.e. LDAP/server@REALM. 
OpenLDAP (with Cyrus SASL and MIT krb5) expects the service to be in
lower case though, i.e. ldap/server@REALM, and thus aborts with
"gss_accept_sec_context: Miscellaneous failure; Wrong principal in
request;"
rfc1510, 7.2.1 states that the hostname must be in lower case, but what
about the service name?

-- 
Norbert Klasen
DFN Directory Services                           tel: +49 7071 29 70335
ZDV, Universität Tübingen                        fax: +49 7071 29 5912
Wächterstr. 76, 72074 Tübingen              http://www.directory.dfn.de
Germany                             norbert.klasen@zdv.uni-tuebingen.de