[Samba] kinit with SPN fail

banda bassotti bandabasotti at gmail.com
Wed Jun 10 19:01:44 UTC 2020


The production will be updated as soon as possible, back to the kinit it
seems to me that we are going around the problem :) I will do tests, in the
next few days I will make up for it unless there are some hints.

thanks.

Il giorno mer 10 giu 2020 alle ore 20:46 Rowland penny via samba <
samba at lists.samba.org> ha scritto:

> On 10/06/2020 19:25, banda bassotti via samba wrote:
> > Hi Rowland, yes I'm configuring apache kafka / zookeeper, I need Kerberos
> > authentication for the test environment and I don't have AD :)
> How can you be using samba-tool and not have AD ?
> >
> > I'v two environment, the first (production), samba 4.5.1 work as
> intended:
>
> But the intended use of Samba 4.5.1 is not to work, it is EOL :-D
>
> If I read the zookeeper page correctly, you should be adding the SPN to
> the hosts object, not to a user.
>
> Something like:
>
> samba-tool spn add zookeeper/zookeeper1.example.com zookeeper1\$
>
> samba-tool domain exportkeytab /tmp/zookeeper.keytab
> --principal=zookeeper/zookeeper1.example.com
>
> Rowland
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


More information about the samba mailing list