active directory - kinit(v5): Client not found in Kerberos database while getting initial credentials -



active directory - kinit(v5): Client not found in Kerberos database while getting initial credentials -

i'm working on configuring sso in obiee 11.1.1.7.14, in i'm facing issue in step while configuring krb5.conf , executing kinit command.

few notes regarding active directory

we have more 1 domain controller , balance request maintaing load balancer port 3269. and integration between obiee , msad done load balancer name host , port 3269. and few certificates have been added in demotrust.jks , ovd store , ssl enabled in new provider. keytab file generated , placed in obiee domain home, krb5.conf , krb5login.conf file modified accordingly.

i have created keytab file , placed in obiee domain home, modified krb5.conf keeping kdc 1 of ip address of domain controller , admin-server name of domain controller. , while executing

kinit -v -k -t /location/keytabfile.keytab http/obiee_host_name

i have got , error "kinit(v5): client not found in kerberos database while getting initial credentials" . please share ideas/suggestions solve issue.

thanks in advance

first of all, serverfault.

3269 not kerberos, ssl-backed global catalog. pure ldap not kerberos. not interesting here. do not set kdc ip addresses in krb5.conf rather rely on dns srv records windows does. you cannot kinit spn. kinit expects upn (from ad) keytab. accountname$@example.com if machine account. remember, spn always bound account, whether machine or functional.

active-directory kerberos obiee

Comments

Popular posts from this blog

Delphi change the assembly code of a running process -

json - Hibernate and Jackson (java.lang.IllegalStateException: Cannot call sendError() after the response has been committed) -

C++ 11 "class" keyword -