samba4 keytab management

Matthieu Patou mat at
Tue Oct 19 13:23:43 MDT 2010

> I believe this is because many programs want to be able to get those service
> principal tickets.  The samba KDC doesn't let you do that.  Setting
> userPrincipalName ended up being a temporary fix for my issue -- NFS4 wants to
> be able to get nfs/foo tickets on both the server and clients.  However, since
> you can only set one userPrincipalName, I still think the right solution is
> allowing clients to get service principal tickets.
Why a client could not be able to have a SPN ?


Matthieu Patou
Samba Team

More information about the samba-technical mailing list