Prob: failed to verify krb5 credentials: Server not found in=20

Michael Ströder michael at stroeder.com
Tue Feb 3 18:22:05 EST 2009


slaindevil at kabelmail.de wrote:
> @Paul Moore: What do you mean, with "an AD account with that SPN"?

He meant an AD user entry for this service with the appropriate service
principal name set in (LDAP attribute) 'servicePrincipalName'.

> I had created an extra user and password at the AD. This login is
> saved inside of the keytab together with the SPN:
> HTTP/wiki.test.lan at SRV.TEST.LAN

I guess you used setspn.exe or ktpass.exe to map the AD user account to
the service principal name?

Ciao, Michael.



More information about the Kerberos mailing list