MIT kinit with AD userPrincipalName with SMTP domain and not proper realm?
Luke Howard
lukeh at padl.com
Sat Nov 21 05:44:13 EST 2009
> Meaning if I have a realm EXAMPLE.LOCAL and an SMTP domain EXAMPLE.COM
> and userPrincipalName attributes on accounts in AD use the SMTP domain
> like alice at EXAMPLE.COM can initial credentials be acquired?
>
> If I try kinit I get:
>
> $ kinit -f alice at EXAMPLE.COM
> kinit(v5): Cannot resolve network address for KDC in realm
> EXAMPLE.COM while getting initial credentials
kinit -E -f alice at example.com@EXAMPLE.LOCAL
NB: if this doesn't work in 1.7, try trunk, I think it may have been
broken in 1.7.
-- Luke
More information about the Kerberos
mailing list