spn alias

[Jeffrey Hutzelman]

What LDAP server software are you using?

On Thu, Mar 6, 2025 at 11:44 AM Stefan Kania <stefan at kania-online.de> wrote:

> hi to all,
> is it possible to set an alais for the spn? We still having the problem
> doing  kerberos authentication through a loadbalancer. We created a
> principal for the loadbalancer and a keytab. We then added the key to
> the ldap-keytab file, so we are having both, the ldap key for the server
> and the ldap key for the loadbalancer in one file. This file we use as
> keytab for the ldap-server. the client connets to the loadbalancer (with
> ldapsearch) and we are getting "err=49" and the log is showing that the
> spn is wrong. So we think with an alias for the spn for the loadbalancer
> it might work. Or is there any other way to get the
> kerberos-authentication through the loadbalancer?
>
> Stefan
>
>
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>