active directory - kinit(v5): Client not found in Kerberos database while getting initial credentials -
active directory - kinit(v5): Client not found in Kerberos database while getting initial credentials -
i'm working on configuring sso in obiee 11.1.1.7.14, in i'm facing issue in step while configuring krb5.conf , executing kinit command.
few notes regarding active directory
we have more 1 domain controller , balance request maintaing load balancer port 3269. and integration between obiee , msad done load balancer name host , port 3269. and few certificates have been added in demotrust.jks , ovd store , ssl enabled in new provider. keytab file generated , placed in obiee domain home, krb5.conf , krb5login.conf file modified accordingly.i have created keytab file , placed in obiee domain home, modified krb5.conf keeping kdc 1 of ip address of domain controller , admin-server name of domain controller. , while executing
kinit -v -k -t /location/keytabfile.keytab http/obiee_host_name
i have got , error "kinit(v5): client not found in kerberos database while getting initial credentials" . please share ideas/suggestions solve issue.
thanks in advance
first of all, serverfault.
3269 not kerberos, ssl-backed global catalog. pure ldap not kerberos. not interesting here. do not set kdc ip addresses inkrb5.conf
rather rely on dns srv records windows does. you cannot kinit
spn. kinit
expects upn (from ad) keytab. accountname$@example.com
if machine account. remember, spn always bound account, whether machine or functional. active-directory kerberos obiee
Comments
Post a Comment