Handling in an elegant and efficient way SPN cifs/realm

[Andrew Bartlett]

On Wed, 2009-08-26 at 01:55 +0400, Matthieu Patou wrote:
> Hello all,
> 
> I rediscover that Windows client are time to times looking for cifs/real 
> SPN (ie. cifs/smb4.tst or cifs/SMB4.TST). One quick way to avoid this 
> problem is to add this SPN to the list of SPN of the DC.
> 
> That's an easy trick and maybe it can be done for the moment until we 
> have something a bit more efficient ?
> 
> The absence of this SPN cause windows to switch to NTLM so still the 
> access is possible.

I asked about this on cifs-protocol earlier this year.  If you could
read the responses, and see if you can make more sense of it than I did,
then we can implement that properly. 

http://lists.samba.org/archive/cifs-protocol/2009-June/000778.html

Otherwise, we might need to ask yet again, because I've never really
understood the replies :-)

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20090826/854ca383/attachment.pgp>