[Samba] kinit with SPN fail

Rowland penny rpenny at samba.org
Wed Jun 10 18:46:06 UTC 2020

On 10/06/2020 19:25, banda bassotti via samba wrote:
> Hi Rowland, yes I'm configuring apache kafka / zookeeper, I need Kerberos
> authentication for the test environment and I don't have AD :)
How can you be using samba-tool and not have AD ?
> I'v two environment, the first (production), samba 4.5.1 work as intended:

But the intended use of Samba 4.5.1 is not to work, it is EOL :-D

If I read the zookeeper page correctly, you should be adding the SPN to 
the hosts object, not to a user.

Something like:

samba-tool spn add zookeeper/zookeeper1.example.com zookeeper1\$

samba-tool domain exportkeytab /tmp/zookeeper.keytab 


More information about the samba mailing list