We are using openldap 2.6 together with mti-kerberos version 1.18 on debian 12.

Am 06.03.25 um 17:57 schrieb Jeffrey Hutzelman:
What LDAP server software are you using?

On Thu, Mar 6, 2025 at 11:44 AM Stefan Kania <[email protected] <mailto:[email protected]>> wrote:

    hi to all,
    is it possible to set an alais for the spn? We still having the problem
    doing  kerberos authentication through a loadbalancer. We created a
    principal for the loadbalancer and a keytab. We then added the key to
    the ldap-keytab file, so we are having both, the ldap key for the
    server
    and the ldap key for the loadbalancer in one file. This file we use as
    keytab for the ldap-server. the client connets to the loadbalancer
    (with
    ldapsearch) and we are getting "err=49" and the log is showing that the
    spn is wrong. So we think with an alias for the spn for the
    loadbalancer
    it might work. Or is there any other way to get the
    kerberos-authentication through the loadbalancer?

    Stefan



    ________________________________________________
    Kerberos mailing list [email protected] <mailto:[email protected]>
    https://mailman.mit.edu/mailman/listinfo/kerberos <https://
    mailman.mit.edu/mailman/listinfo/kerberos>




Attachment: smime.p7s
Description: Kryptografische S/MIME-Signatur

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to