[30982] in Kerberos
Re: Aqcuiring a TGT for a host/ principal using Active Directory
daemon@ATHENA.MIT.EDU (Javier Palacios)
Wed Apr 8 12:18:14 2009
X-Barracuda-Envelope-From: javiplx@gmail.com
MIME-Version: 1.0
In-Reply-To: <5DEBEADA3C05964F9A8D57D1B4DE467D02EA49F3@cernxchg42.cern.ch>
Date: Wed, 8 Apr 2009 18:17:32 +0200
Message-ID: <a64bf030904080917q69a6ebffla0802679da50f453@mail.gmail.com>
From: Javier Palacios <javiplx@gmail.com>
To: John Hefferman <john.hefferman@cern.ch>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, Apr 8, 2009 at 11:52 AM, John Hefferman <john.hefferman@cern.ch> wrote:
> Dear All,
>
> The problem I am experiencing, is that I can't seem to 'kinit -k' using
> an spn of an instance type such as host/ when using an AD domain
> controller.
>
> The procedure is as follows:
> - I create a new account in active directory, such as 'computerA'
> - I run ktpass (or msktutil) to associate a host/ principal name with
> this account (host/computerA.fqdn@REALM) and create a keytab
You can try to install samba at the unix server, configure for
kerberos security and join it to the domain, an also try with
css_adkadmin.
Javier Palacios
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
