attribute modification: problem comming soon

[Michael Ströder]

Nadezhda Ivanova wrote:
> Also, I am not sure I understand what you write about Windows behavior and
> why this is a problem. As far as I know, when you join a computer to a
> domain windows automatically assigns a SPN with two values
> HOST/netbiosName, and HOST/FQDN.com, and I read somewhere that it is not
> recommended to change then via LDAP.

servicePrincipalName in MS AD is also changed if you use the ktpasswd.exe tool
(e.g. from Windows Server 2003 Support Tools) or msktutil (found in some Linux
distros) for generating a service keytab file.

Ciao, Michael.