[Samba] Asking help exporing a valid keytab file for cups http

[van Vloten Kees]

Op zo 22 jun. 2025 15:00 schreef Rowland Penny via samba <
samba at lists.samba.org>:

> On Sun, 22 Jun 2025 13:56:37 +0200
> Kees van Vloten via samba <samba at lists.samba.org> wrote:
> >
> > You are pretty far in the right direction.
> >
> > You correctly put an SPN on the machine account, which is what cups
> > will use. However, if you create an SPN it assumes the default port
> > (for http that is 443). If your cups service listens to 631, which I
> > assume, you have to put that in the SPN, i.e.
> > "HTTP/cupsserver.domain.tld:631 at DOMAIN.TLD"
>
> You might be right about the port, but I think it might need to
> start with 'https' instead of 'http' and if does, then such an SPN will
> need to be added, the 'host' SPN does not cover 'https'.
>

There is no kerberos service "https", both Apache and cups just recognize
"http" (I don't know about Nginx).
Adding the port is important for any non-standaard port.
- Kees.

>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>