Reg: providing kerberos for multiple UPN suffix - unable to create keytab for multiple UPN's

pvbalachandar PVBalachandar at
Tue Mar 19 06:50:19 EDT 2013

Hello all,

I really need your guys help. Currently I have provided Kerberos
authentication to Shibboleth Identity Provider to access my Service provider

I am very well aware that Kerberos does not support multiple UPN suffixes.
But I am really in a situation to provide Kerberos for multiple UPN
suffixes. Is there any alternative to achieve this?

I am going to have around 100 domains as UPN suffix to my primary domain and
authenticate users. My primary domain has got Kerberos access, but accounts
with different UPN suffix is not getting authenticated.

Please help me to resolve this issue. Hope you guys can help me in it.



Prasanna V B  |  Software Developer

View this message in context:
Sent from the Kerberos - Dev mailing list archive at

More information about the krbdev mailing list