List principals on Windows 2000 Kerberos database

Markus Moeller huaraz at moeller.plus.com
Tue Dec 13 16:28:32 EST 2005


You can use ldapsearch  -H ldap://server -b "base" -s sub 
"(serviceprincipalname=*)"
serviceprincipalname from a unix box or use ldp or ADSIEdit or any other 
ldap tool searching for serviceprincipalname.
The other option is setspn -L name, but this means looping over every AD 
entry.

Markus

"Celia Clark" <celia.clark at gmail.com> wrote in message 
news:894422f60512130934m51896a7m905bd1ebf67de756 at mail.gmail.com...
> Hi all,
>
> I am trying to determine which principals are stored in my Kerberos 
> database
> on Windows 2000 KDC.
> I can not find any documentation anywhere on how to do this.
>
> Can anyone give me some tips?
>
> Many thanks,
>
> Celia
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 




More information about the Kerberos mailing list