[30943] in Kerberos
Re: confusion with service principal names in Active Directory
daemon@ATHENA.MIT.EDU (John Jasen)
Mon Mar 30 13:25:08 2009
Message-ID: <49D1002E.6030801@realityfailure.org>
Date: Mon, 30 Mar 2009 13:23:58 -0400
From: John Jasen <jjasen@realityfailure.org>
MIME-Version: 1.0
To: Paul Moore <paul.moore@centrify.com>
In-Reply-To: <BB7E16A14DE689469A181EC770AFBF4D02E2066F@exch-one.centrify.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Paul Moore wrote:
> use adsiedit (GUI) to set the spn on the AD rpincipal
> or setspn cli tool
I don't think that's the problem. The SPN is listed in Active Directory,
and can be queried through ldapsearch, listed via setspn, seen through
ADSIedit or jxplorer, etc. Its definitely in there, just stock kerberos
doesn't see it for some reason.
--
-- John E. Jasen (jjasen@realityfailure.org)
-- No one will sorrow for me when I die, because those who would
-- are dead already. -- Lan Mandragoran, The Wheel of Time, New Spring
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
