On Mon, Mar 30, 2009 at 1:23 PM, John Jasen <[email protected]> wrote: > Paul Moore wrote: >> use adsiedit (GUI) to set the spn on the AD rpincipal >> or setspn cli tool > > I don't think that's the problem. The SPN is listed in Active Directory, > and can be queried through ldapsearch, listed via setspn, seen through > ADSIedit or jxplorer, etc. Its definitely in there, just stock kerberos > doesn't see it for some reason.
Make sure that you do not have the same SPN set on more than one account. If you do, AD will consider the request ambigous and it will NOT grant a ticket for that SPN. Mike -- Michael B Allen Java Active Directory Integration http://www.ioplex.com/ ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
