Fix: Verify whether the server service principal name and client principal name are in the KDC database.
解决方案：检查服务器服务主体名和客户机主体名是否存储在KDC数据库中。
The Web service will need a keytab file, which contains the service principal name and an encrypted key.
Web服务需要一个keytab文件，其中包含服务主体名和一个加密的密匙。
If the virtual account fails to register the Service Principal Name (SPN), register the SPN manually.
如果虚拟帐户无法注册服务主体名称(SPN)，则手动注册该SPN。
The client request message mainly includes the client principal name, and the desired lifetime of the ticket.
客户端请求消息主要包括客户端主体名称、期望的票证有效期。
The login module can also support default principals, that is, using default TGT or secret key when no principal name is specified.
登录模块还支持缺省主体，即，在没有指明主体名时使用缺省的TGT或密钥。
You've got the valid credentials from KDC for principal name sandeep, so let's try to log in as principal root, as shown in Listing 3.
您已经从KDC 获得了主体名sandeep的有效凭据，所以让我们来尝试以主体root 用户进行登录，如 清单 3 所示。
If you use a principal name of "ashish", AUSTIN.IBM.COM will be appended by the default to the principal and the final principal will be ashish@AUSTIN.IBM.COM.
如果您使用一个主体名 “ashish”，AUSTIN.IBM.COM将默认附加到主体名之后，这样，最终的主体为 ashish@AUSTIN.IBM.COM。
A matching work item is either a user work item corresponding to the caller principal name, or a group work item corresponding to one of the groups of which the caller is a member.
匹配的工作项可以是与调用方主体名对应的用户工作项，也可以是与调用方所在组之一对应的组工作项。
In summary, the mapping of a user's principal name into a meaningful name to the WebSphere registry must be considered when planning a SPNEGO WebSphere Application Server deployment.
总的说来，在计划SPNEGO TAI部署时，必须考虑将用户的主体名称映射到WebSphere注册中心中的有意义的名称。
The sending server only sends the user identity (X.509 certificate, principal name, or distinguished name (DN) based on the credentials used for the initial login) to the target server.
发送服务器仅将用户标识（X.509证书、主体名、或基于初始登录所使用的凭据的专用名称 (DN)）发送到目标服务器。
In fact, the only difference is the principal statement, which states that only subjects (users) that have the specified principal and principal name are granted the specified permissions.
实际上，唯一的不同是主体语句，该语句声明只有拥有指定主体和主体名字的subject(用户)被授予指定的许可权。
For custom registries, it also considers the configuration parameter UseDisplayName value, in order to return the user registry parameter as query result that corresponds to the caller principal name.
对于自定义注册中心，此插件还考虑配置参数usedisplayname值，以便作为与调用方主体名称对应的查询结果返回用户注册中心参数。
One such issue is related to the EJB container and its inability to determine some types of caller principal information, such as user name.
其中一个问题与ejb容器有关，它无法确定一些类型的调用者主体信息，比如用户名。
You may need to map the user name to a principal that is meaningful in the server's registry.
您可能需要将用户名映射到服务器的注册中心中有意义的主体。
The principal benefit of open source software is, as its name implies, access to the inner workings of an application.
顾名思义，开源软件的主要优势就是允许了解应用程序的内部工作原理。
For the root user of the Solaris 10 machine to be able to log in using telnet/ssh/rlogin with the above setup, you are required to create a Kerberos principal of type root/<host name>.
为了通过上面的设置，使得 Solaris10计算机的root用户能够使用telnet/ssh/rlogin 进行登录，您需要创建一个 root/<hostname>类型的Kerberos主体。
AddOnPrincipalName: Specifies the name of the principal to be added to the subject.
addOnPrincipalName：指定要添加到主题的主体的名称。
The principal org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal with the name system is used as a default principal when a user is not authenticated.
名称为system的主体or g . apache . geronimo . security . realm . providers . GeronimoUserPrincipal在用户不进行认证时用作默认主体。
The ambiguity can be resolved when specifying a principal by qualifying it with the desired domain name.
在指定主体时可以解决这种不明确性，其方法是通过所需的域名限定它。
Besides her name, Ms Kennedy's principal qualification appears to be her friendship with Mr Obama.
除过她的名字，肯尼迪女士的最主要的资格来自于她和奥巴马先生的交情。
It was this old woman, ornamented with the name of the principal lodger, and in reality intrusted with the functions of portress, who had let him the lodging on Christmas eve.
老奶奶的头衔是“二房东”，而实际任务是照管门户，在圣诞节那天，便是这老奶奶把这间住房租给他的。
Article 33 Alterations of the name, legal representative, key principal or investor of any employer may not influence the performance of the labor contracts.
第三十三条用人单位变更名称、法定代表人、主要负责人或者投资人等事项，不影响劳动合同的履行。
Typically, Community Edition can't distinguish between two different principals that have the same name and same principal class but were produced by two different LoginModules.
通常，对于两个具有相同名称和相同主体类、但却由两个不同的LoginModule生成的不同主体，CommunityEdition无法进行区分。
When this format is used, Windows will correctly resolve the principal in the desired domain, even when an account with the same name resolves in multiple locations.
在使用这种格式时，Windows会正确解析所需域中的主体，即使一个帐户在多个位置有相同的名称。
In particular, a user name cannot be determined by the principal object, although it is available in the Web container.
特别地，用户名不能由principal对象确定，虽然在web容器中它是可用的。
AddOnPrincipalClass: Specifies the fully qualified name of the class of the principal to be added to the subject if the login succeeds.
addonprincipalclass：指定登录成功后添加到主题(subject)的主体(principal)的类的完全限定名。
The Agent has no authority or power to bind the Principal towards third parties or to contract in the name of the Principal or create a liability against it in any way or for any purpose.
代理方无权限制委托方与第三方合作，无权以委托方的名义签订合同，也无权以任何形式或以任何目的给委托方制造麻烦。
Details of the principal including full name, postal address, and if applicable telex, telephone and facsimile Numbers.
委托人的详细资料，包括完整的名称、邮政地址，以及如有的话，电传、电话和传真号码。
The role-name attribute is used to specify the role to which the principal elements inside the role tag are to be mapped.
role-name属性用于指定要进行映射的 role标记中的主体元素的角色。
Kerberos 5 service principals include the fully qualified domain name (FQDN) of the host that the service is installed on. The generic service principal format is.
Kerberos5服务主体包括安装服务的主机的完全限定域名(FQDN)。
应用推荐