[Samba] AD + Double Hop + Kerberos Delegation

A H a.hassle.spam at gmail.com
Tue Jul 19 08:53:23 MDT 2011


Hello all,

I am running v3.4.5 of Samba.  Does this version support double hop kerberos
authentication?  I turned the log level up to 3 and found that it is passing
only the hostname.  This leads me to believe that the double hop part is not
working.

I did read that it is supposed to work in Samba4 via
http://lists.samba.org/archive/samba-technical/2005-November/043912.html
but wasn't sure about the original Samba.

There is a HOSTS SPN for the linux box.  I do have the HOSTS SPN added to
the AD account as needed.   I have set up other kerberos delegations before
(all within Windows environments) without a lot of problems.

Thanks,
AH


More information about the samba mailing list