Kerberos: Principal may not act as server ERROR

[Andrew Bartlett]

On Tue, 2010-08-03 at 14:42 -0400, Aggarwal, Ajay wrote:
> Hi Andrew,
> 
> We updated to the latest GIT tree, compiled and reinstalled. But we still see the exact same error meesages.

The error message about 'unable to act as a server' for Administrator
can be overridden by adding any servicePrincipalName to the
administrator user.  Clearly I will have to deactivate this additional
security restriction by default.  Please file a bug so that I remember. 

As to the other messages, perhaps set the dnsHostName manually on the
record, and see if it helps.  Clearly we need to figure out why it's not
working 'out of the box', but this might help in the meantime.  Also
file a bug on this. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100805/a133e78b/attachment.pgp>