On 08/31/2011 10:30 AM, Nikolay Shopik wrote:
>
> Can you do kinit -k imap/imap/efim.test.lo...@romashka.lan and then
> klist, does it work for you?
>
> I do recommend tcpdump kerberos traffic between your client and
> server, this is usually helps me much better then any logging, flow
> easy to read in wireshark.
>
Under active directory, you cannot kinit as an SPN, only UPN (including
MACHINE$ accounts). At least this is my experience.

Trever
-- 
"Selfishness is really self-destruction in slow motion." -— Elder Neal
A. Maxwell - Ensign, May 1999, 23

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to