Normal principals usually don't have an instance. However, there
shouldn't be anything that prevents a principal with an instance from

If your certificates are correctly set up for the two principals, this
might be a bug.


On Thu, Jun 12, 2008 at 11:10 AM,
> Hi kevin,
> I am getting client name mismatch when i do,
> kinit -X X509_user_identity=FILE:/client/test.pem,/client/test.key test/rg71
> kinit(v5): Client name mismatch while getting initial credentials
> the naming which i have followed in the certificates are:
> CN = test/rg71
> SAN= test/
> but, the same works when i do kinit -X
> X509_user_identity=FILE:/client/test.pem,/client/test.key test
> with CN = test
> SAN = test.
> Should there not be a slash in the clients name, but kinit will send the
> as_req with
> the slash in the client name.
> kindly help me in solving this problem.
> Thank you
> with regards
> naveen