Christoph Maser wrote:

<snip>

> Hm that looks like you use it wrong, thats how we do it:

<snip>

Nope, no dice.

I added a machine to the domain, kinit'd to an admin user, ran net ads
keytab create (which is also done on an ads join, FWIW), and added http
and nfs service principals.

None of them work via kinit, even though ldap queries clearly show the
SPNs under the machine account.


-- 
-- John E. Jasen ([EMAIL PROTECTED])
-- No one will sorrow for me when I die, because those who would
-- are dead already. -- Lan Mandragoran, The Wheel of Time, New Spring
_______________________________________________
Tech mailing list
[email protected]
http://lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to