[SSSD] GSSAPI and Kerberos - understanding question

Ondrej Valousek webserv at s3group.cz
Fri Nov 25 15:36:56 UTC 2011


> If you do a net ads join without any other parameters, the credential that'll
> work is the PONTUS$ cred, not the others.
>
> So "kinit -k PONTUS$" should work.
>
Always the same story - people get confused by the UPN (User Principal Name) and SPN (Service Principal Name) meaning.
We should write it down somewhere using bold letters so everyone knows....

Ondrej
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111125/7ba67bac/attachment.html>


More information about the sssd-devel mailing list