[Fwd: Re: [PATCH] keytab management for ADS mode.]

[Jeremy Allison]

On Fri, Jan 30, 2004 at 10:22:56AM +0100, Love wrote:
> 
> Jeremy Allison <jra at samba.org> writes:
> 
> > but when I do a kinit it will only return tickets for j1, j1$,
> > HOST/j1
> >
> > They are what are in the kdc. What is in the LDAP server doesn't
> > seem to match.
> 
> Try kvno (the almost equivlant in heimdal i kgetcred). The cifs/* may have
> a flag set that disable use for initial ticket.

Cool ! Thanks - that looks like it - you can't kinit for the fqdn
host and cifs principals, but you can get them with kvno. Thanks
for the help, I'll store that away for future testing.... :-).

Jeremy.