attribute modification: problem comming soon

Michael Ströder michael at
Tue Aug 18 06:27:03 MDT 2009

Nadezhda Ivanova wrote:
> Also, I am not sure I understand what you write about Windows behavior and
> why this is a problem. As far as I know, when you join a computer to a
> domain windows automatically assigns a SPN with two values
> HOST/netbiosName, and HOST/, and I read somewhere that it is not
> recommended to change then via LDAP.

servicePrincipalName in MS AD is also changed if you use the ktpasswd.exe tool
(e.g. from Windows Server 2003 Support Tools) or msktutil (found in some Linux
distros) for generating a service keytab file.

Ciao, Michael.

More information about the samba-technical mailing list