You can use ldapsearch  -H ldap://server -b "base" -s sub 
"(serviceprincipalname=*)"
serviceprincipalname from a unix box or use ldp or ADSIEdit or any other 
ldap tool searching for serviceprincipalname.
The other option is setspn -L name, but this means looping over every AD 
entry.

Markus

"Celia Clark" <[EMAIL PROTECTED]> wrote in message 
news:[EMAIL PROTECTED]
> Hi all,
>
> I am trying to determine which principals are stored in my Kerberos 
> database
> on Windows 2000 KDC.
> I can not find any documentation anywhere on how to do this.
>
> Can anyone give me some tips?
>
> Many thanks,
>
> Celia
> ________________________________________________
> Kerberos mailing list           [email protected]
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 


________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to