On Wed, 2015-02-18 at 20:57 +0000, Sreekanth Nadendla wrote:
> > Specifically, why can I get a ticket to machine$@REALM but not 
> > administrator@REALM?
> 
> Andrew, I am able to get ticket for administrator@REALM. See below. 

By 'to' I mean both:
 - as the service principal in the AS-REQ.  Typically this is krbtgt/ so
you can get a ticket granting ticket, but you can actually ask for a
ticket to any valid service.  kpasswd is a good example
 - as the service principal in the TGS-REQ.

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




_______________________________________________
cifs-protocol mailing list
[email protected]
https://lists.samba.org/mailman/listinfo/cifs-protocol

Reply via email to