Greg, We've a keytab file (test.keytab) with keytab entries of the form shown below pointing to a Windows host joined to a AD domain (DOMAINNAME.COM)
KVNO Timestamp Principal ---- ----------------- -------------------------------------------------------- 1 11/21/14 14:25:56 host/hostname.domainname....@domainname.com (des3-cbc-sha1) 1 11/21/14 14:25:56 host/hostname.domainname....@domainname.com (aes256-cts-hmac-sha1-96) 1 11/21/14 14:25:56 host/hostname.domainname....@domainname.com (aes128-cts-hmac-sha1-96) When we try using kinit, we see the following error: kinit -k -t test.keytab host/hostname.domainname....@domainname.com *kinit: Client not found in Kerberos database while getting initial credentials* >From what we observed, it seems that Windows is expecting a UserPrincipalName. Is it somehow possible to specify a different principal name when using kinit but still make it use the credential information stored in the keytab file? Prakash N | 408 771 4273 ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
