2008/11/10 Gerald (Jerry) Carter <[EMAIL PROTECTED]>:
> You can only get a TGT using either the UPN or the
> sAMAccountName.  Machine accounts have no UPN by default.
> My guess is that this is the root of your troubles.

Hello Jerry,

I think I already have a TGT, klist says that I have a TGT named
krbtgt/[EMAIL PROTECTED]:

Valid starting     Expires            Service principal
11/11/08 10:14:07  11/11/08 20:13:52  krbtgt/[EMAIL PROTECTED]

and kutil: rkt /etc/krb5.keytab says I have nine principals:
3 x host/[EMAIL PROTECTED]
3 x host/[EMAIL PROTECTED]
3 x [EMAIL PROTECTED]

(In Active directory I see a sAMAccountName of "hostname$", not "HOSTNAME$".)

Hopefully I am nearly there :)

What you say I need to get a TGT using either the UPN or the
sAMAccountName, what should I be doing differently?

Thanks, Degbert
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to