On Wed, Dec 18, 2013 at 11:11:12PM +0000, Bryan Harris wrote:
Hello all,
I wasn't sure who to reply to so here goes. I have tried an alternative method of
kinit arguments, and received a ticket back this time. I just wanted to mention it and
show the output, even though it seems now that I may want to use the Samba tools to do
these steps anyway.
Here it is, sanitized.
client = Linux Debian sssd client
domain.local is the AD domain
kinit -k 'host/client.domain.local(a)DOMAIN.LOCAL'
klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: host/client.domain.local(a)DOMAIN.LOCAL
Valid starting Expires Service principal
12/18/13 17:06:16 12/19/13 03:06:14 krbtgt/DOMAIN.LOCAL(a)DOMAIN.LOCAL
renew until 12/25/13 17:06:16
Bryan
Are you able to request service tickets using this principal? Would
ldapsearch with "-Y GSSAPI" work with this ticket?