[Fwd: Re: [PATCH] keytab management for ADS mode.]

Love lha at stacken.kth.se
Fri Jan 30 09:22:56 GMT 2004


Jeremy Allison <jra at samba.org> writes:

> but when I do a kinit it will only return tickets for j1, j1$,
> HOST/j1
>
> They are what are in the kdc. What is in the LDAP server doesn't
> seem to match.

Try kvno (the almost equivlant in heimdal i kgetcred). The cifs/* may have
a flag set that disable use for initial ticket.

Love

: lha at nutcracker ; kgetcred host/adwsrv01.win.su.se at WIN.SU.SE
: lha at nutcracker ; kgetcred cifs/adwsrv01.win.su.se at WIN.SU.SE
: lha at nutcracker ; kgetcred host/adwsrv01 at WIN.SU.SE
: lha at nutcracker ; kgetcred cifs/adwsrv01 at WIN.SU.SE
: lha at nutcracker ; kgetcred adwsrv01\$@WIN.SU.SE
: lha at nutcracker ; kgetcred adwsrv01 at WIN.SU.SE
: lha at nutcracker ; klist
Credentials cache: FILE:/tmp/krb5cc_00834a
        Principal: lha at SU.SE

  Issued           Expires          Principal                      
Jan 30 10:06:37  Jan 30 20:06:15  krbtgt/SU.SE at SU.SE               
Jan 30 10:06:41  Jan 30 20:06:15  afs at SU.SE                        
Jan 30 10:06:45  Jan 30 20:06:15  krbtgt/WIN.SU.SE at SU.SE           
Jan 30 10:06:45  Jan 30 20:06:15  host/adwsrv01.win.su.se at WIN.SU.SE
Jan 30 10:06:54  Jan 30 20:06:15  cifs/adwsrv01.win.su.se at WIN.SU.SE
Jan 30 10:19:15  Jan 30 20:06:15  host/adwsrv01 at WIN.SU.SE          
Jan 30 10:19:24  Jan 30 20:06:15  cifs/adwsrv01 at WIN.SU.SE          
Jan 30 10:20:57  Jan 30 20:06:15  adwsrv01$@WIN.SU.SE              
Jan 30 10:21:00  Jan 30 20:06:15  adwsrv01 at WIN.SU.SE               
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 477 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20040130/f0fd123b/attachment.bin


More information about the samba-technical mailing list