[SSSD] GSSAPI and Kerberos - understanding question

Ondrej Valousek webserv at s3group.cz
Mon Nov 28 09:13:25 UTC 2011


On 11/28/2011 09:46 AM, John Hodrien wrote:
> On Sun, 27 Nov 2011, Josh Geisser wrote:
>
>> Yes, totally confused :)
>>
>> Thanks to you guy's I got it working now. But what I don't get is how
>> Kerberos keys are handled in general. The /etc/krb5.keytab is a container,
>> can I take both, UPN and SPN?
> Yes.  My understanding is the only difference between a service principal and
> a user principal is that the KDC will not issue a ticket granting ticket to a
> service principal.
>
> jh
Yes and it is no wonder  because UPN and SPN serve a different task. I recommend searching MS technet for this. They have a nice explanation 
for this.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111128/7d4bd467/attachment.html>


More information about the sssd-devel mailing list