Re: spn alias
Jeffrey Hutzelman <[email protected]> Thu, 6 Mar 2025 11:57:49 -0500
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <CALF+FNxM=H=h=Ux0KSeJ7iy+KDrZL36GEESfcaWfZPBx77wMiQ@mail.gmail.com> |
What LDAP server software are you using? On Thu, Mar 6, 2025 at 11:44 AM Stefan Kania <[email protected]> wrote: > hi to all, > is it possible to set an alais for the spn? We still having the problem > doing kerberos authentication through a loadbalancer. We created a > principal for the loadbalancer and a keytab. We then added the key to > the ldap-keytab file, so we are having both, the ldap key for the server > and the ldap key for the loadbalancer in one file. This file we use as > keytab for the ldap-server. the client connets to the loadbalancer (with > ldapsearch) and we are getting "err=49" and the log is showing that the > spn is wrong. So we think with an alias for the spn for the loadbalancer > it might work. Or is there any other way to get the > kerberos-authentication through the loadbalancer? > > Stefan > > > > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos > ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos