A client name with an '@'

Nordgren, Bryce L -FS bnordgren at fs.fed.us
Tue Jun 2 17:37:59 EDT 2015


> You could try the -C and -E options to kinit:
> 
> 	-C canonicalize
> 	-E client is enterprise principal name
> 
> — Luke

I could, but I'm not certain the MIT Kerberos KDC (to which kinit is connecting) knows how to canonicalize. Boy if I could get user principal mapping going, that would be sweet.

For the moment, I seem to be PKINITing successfully.

Bryce



More information about the Kerberos mailing list