MIT kinit with AD userPrincipalName with SMTP domain and not proper realm?

Luke Howard lukeh at padl.com
Sat Nov 21 05:44:13 EST 2009


> Meaning if I have a realm EXAMPLE.LOCAL and an SMTP domain EXAMPLE.COM
> and userPrincipalName attributes on accounts in AD use the SMTP domain
> like alice at EXAMPLE.COM can initial credentials be acquired?
>
> If I try kinit I get:
>
>  $ kinit -f alice at EXAMPLE.COM
>  kinit(v5): Cannot resolve network address for KDC in realm
> EXAMPLE.COM while getting initial credentials

kinit -E -f alice at example.com@EXAMPLE.LOCAL

NB: if this doesn't work in 1.7, try trunk, I think it may have been  
broken in 1.7.

-- Luke



More information about the Kerberos mailing list