spn alias

Stefan Kania <[email protected]> Thu, 6 Mar 2025 17:42:46 +0100
Newsgroups gmane.comp.encryption.kerberos.general
Organization Stefan Kania
Message-ID <[email protected]>
hi to all,
is it possible to set an alais for the spn? We still having the problem 
doing  kerberos authentication through a loadbalancer. We created a 
principal for the loadbalancer and a keytab. We then added the key to 
the ldap-keytab file, so we are having both, the ldap key for the server 
and the ldap key for the loadbalancer in one file. This file we use as 
keytab for the ldap-server. the client connets to the loadbalancer (with 
ldapsearch) and we are getting "err=49" and the log is showing that the 
spn is wrong. So we think with an alias for the spn for the loadbalancer 
it might work. Or is there any other way to get the 
kerberos-authentication through the loadbalancer?

Stefan

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
smime.p7s (application/pkcs7-signature, 4.3 KB) - not displayed