hi to all,
is it possible to set an alais for the spn? We still having the problem doing kerberos authentication through a loadbalancer. We created a principal for the loadbalancer and a keytab. We then added the key to the ldap-keytab file, so we are having both, the ldap key for the server and the ldap key for the loadbalancer in one file. This file we use as keytab for the ldap-server. the client connets to the loadbalancer (with ldapsearch) and we are getting "err=49" and the log is showing that the spn is wrong. So we think with an alias for the spn for the loadbalancer it might work. Or is there any other way to get the kerberos-authentication through the loadbalancer?

Stefan



Attachment: smime.p7s
Description: Kryptografische S/MIME-Signatur

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to