[Samba] kinit with SPN fail

[Rowland penny]

On 10/06/2020 19:25, banda bassotti via samba wrote:
> Hi Rowland, yes I'm configuring apache kafka / zookeeper, I need Kerberos
> authentication for the test environment and I don't have AD :)
How can you be using samba-tool and not have AD ?
>
> I'v two environment, the first (production), samba 4.5.1 work as intended:

But the intended use of Samba 4.5.1 is not to work, it is EOL :-D

If I read the zookeeper page correctly, you should be adding the SPN to 
the hosts object, not to a user.

Something like:

samba-tool spn add zookeeper/zookeeper1.example.com zookeeper1\$

samba-tool domain exportkeytab /tmp/zookeeper.keytab 
--principal=zookeeper/zookeeper1.example.com

Rowland