31 Aug
2011
31 Aug
'11
8:49 p.m.
On 08/31/2011 10:30 AM, Nikolay Shopik wrote:
Can you do kinit -k imap/imap/efim.test.local@ROMASHKA.LAN and then klist, does it work for you?
I do recommend tcpdump kerberos traffic between your client and server, this is usually helps me much better then any logging, flow easy to read in wireshark.
Under active directory, you cannot kinit as an SPN, only UPN (including MACHINE$ accounts). At least this is my experience.
Trever
"Selfishness is really self-destruction in slow motion." -— Elder Neal A. Maxwell - Ensign, May 1999, 23