Groups | Search | Server Info | Login | Register


Groups > comp.protocols.kerberos > #5385

spn alias

From Stefan Kania <stefan@kania-online.de>
Newsgroups comp.protocols.kerberos
Subject spn alias
Date 2025-03-06 17:42 +0100
Organization Stefan Kania
Message-ID <mailman.161.1741279390.2322.kerberos@mit.edu> (permalink)
References <42e99884-8cae-4664-9f29-79cd49c5c5e7@kania-online.de>

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

hi to all,
is it possible to set an alais for the spn? We still having the problem 
doing  kerberos authentication through a loadbalancer. We created a 
principal for the loadbalancer and a keytab. We then added the key to 
the ldap-keytab file, so we are having both, the ldap key for the server 
and the ldap key for the loadbalancer in one file. This file we use as 
keytab for the ldap-server. the client connets to the loadbalancer (with 
ldapsearch) and we are getting "err=49" and the log is showing that the 
spn is wrong. So we think with an alias for the spn for the loadbalancer 
it might work. Or is there any other way to get the 
kerberos-authentication through the loadbalancer?

Stefan



Back to comp.protocols.kerberos | Previous | Next | Find similar


Thread

spn alias Stefan Kania <stefan@kania-online.de> - 2025-03-06 17:42 +0100

csiph-web