On ma, 09 syys 2019, Alexander Bokovoy via FreeIPA-users wrote:
On ma, 09 syys 2019, Kevin Vasko via FreeIPA-users wrote:
>Thanks much! I just tried this and sure enough everything came alive
>and started working as soon as I changed the scheme to what Louis
>posted in his first post.
>
>The only other thing that I will note is that the Dell EMC seems to
>hard code what is entered for the REALM as the SPN (Service Principle
>Name). So for example I wanted to put this machine as
>ds1.la.example.com(a)NY.EXAMPLE.COM, however when I type in the host name
>it automatically put the machine as ds1.ny.example.com(a)NY.EXAMPLE.COM
>with no way to change it. If I changed what I typed into the REALM, it
>changed the SPN, but obviously that’s not correct.
It is not an SPN problem. I guess Dell EMC box assumes you are dealing
with AD-like environment. In AD each machine belongs to exactly one AD
domain and there AD domain = realm. So, if you are in
EXAMPLE.COM, your
machine is in .example.com DNS domain (where else it could be?:).
This is what we call 'primary domain' in FreeIPA.
To close the loop: Kevin provided a how to article how to integrate Dell
EMC Unity box with FreeIPA:
https://www.freeipa.org/page/Howto/Integrating_Dell_EMC_Unity
Thanks!
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland