[25108] in Kerberos

home help back first fref pref prev next nref lref last post

Re: List principals on Windows 2000 Kerberos database

daemon@ATHENA.MIT.EDU (Markus Moeller)
Tue Dec 13 19:54:53 2005

From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Tue, 13 Dec 2005 21:28:32 -0000
Message-ID: <439f3d18$0$63080$ed2e19e4@ptn-nntp-reader04.plus.net>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

You can use ldapsearch  -H ldap://server -b "base" -s sub 
"(serviceprincipalname=*)"
serviceprincipalname from a unix box or use ldp or ADSIEdit or any other 
ldap tool searching for serviceprincipalname.
The other option is setspn -L name, but this means looping over every AD 
entry.

Markus

"Celia Clark" <celia.clark@gmail.com> wrote in message 
news:894422f60512130934m51896a7m905bd1ebf67de756@mail.gmail.com...
> Hi all,
>
> I am trying to determine which principals are stored in my Kerberos 
> database
> on Windows 2000 KDC.
> I can not find any documentation anywhere on how to do this.
>
> Can anyone give me some tips?
>
> Many thanks,
>
> Celia
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post