Aqcuiring a TGT for a host/ principal using Active Directory

[Javier Palacios]

On Wed, Apr 8, 2009 at 11:52 AM, John Hefferman <john.hefferman at cern.ch> wrote:
> Dear All,
>
> The problem I am experiencing, is that I can't seem to 'kinit -k' using
> an spn of an instance type such as host/ when using an AD domain
> controller.
>
> The procedure is as follows:
> - I create a new account in active directory, such as 'computerA'
> - I run ktpass (or msktutil) to associate a host/ principal name with
> this account (host/computerA.fqdn at REALM) and create a keytab

You can try to install samba at the unix server, configure for
kerberos security and join it to the domain, an also try with
css_adkadmin.

Javier Palacios