Re: [squid-users] Re: msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Tue, 29 Jun 2010 09:18:30 +0200

tis 2010-06-29 klockan 07:39 +0200 skrev Tom Tux:

> The computer-account already exists in the ad (joined with "net ads join").

Adding principals to a Samba maintained computer account is a little
tricky. I would recommend creating a new account and attach the
principal there.

The main issue is that the key changes each time Samba updates the
computer account (ADS only have a single key per account, not per SPN)

> proxy-test-01:/usr/local/mskutil-0.4/sbin # ktutil
> ktutil: rkt /etc/krb5.keytab
> ktutil: l
> slot KVNO Principal

You need to tell it which keytab to look into.

Regards
Henrik
Received on Tue Jun 29 2010 - 07:18:35 MDT

This archive was generated by hypermail 2.2.0 : Tue Jun 29 2010 - 12:00:03 MDT