On 08/31/2011 10:30 AM, Nikolay Shopik wrote: > > Can you do kinit -k imap/imap/efim.test.lo...@romashka.lan and then > klist, does it work for you? > > I do recommend tcpdump kerberos traffic between your client and > server, this is usually helps me much better then any logging, flow > easy to read in wireshark. > Under active directory, you cannot kinit as an SPN, only UPN (including MACHINE$ accounts). At least this is my experience.
Trever -- "Selfishness is really self-destruction in slow motion." -— Elder Neal A. Maxwell - Ensign, May 1999, 23
signature.asc
Description: OpenPGP digital signature