Prev: [Samba] Samba4 and keytabs
Next: [Samba] smbclient -k works; mount -t cifs does not
From: Michael Wood on 3 May 2010 14:50
On 3 May 2010 17:33, Jussi Vainionpää <jussinsambalist(a)vainionpaa.net> wrote:
> Hello,
>
> I installed Samba4 according to the HOWTO. The provisioning created a user
> (dns) and a keytab for DNS updates, but the service principal in the keytab
> seems to be wrong for me (the domain name instead of ns1.domainname).
>
> What would be the correct way of changing / adding service principals
> associated with a user and re-generating the keytab?
>
> I got the dns updates working by adding a new user with ADUC and creating
> the keytab with ktpass on a windows machine joined to the domain, but that
> seems unnecessarily complicated and results in a keytab with different
> encryption methods compared to the one created by provision.
>
> Besides dns, service principals and keytabs are needed also for a bunch of
> other services (imap, smtp, http); would the same methods apply?

It looks like the source4/setup/spn_update_list file contains the list
of principles.

I haven't dug around enough to know what the proper way is to do what you need.

I suspect you will get more help with this on the samba-technical list.

--
Michael Wood <esiotrot(a)gmail.com>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: [Samba] Samba4 and keytabs
Next: [Samba] smbclient -k works; mount -t cifs does not