Using domain alias instead of host name in kerberos authentication

Asked Jul 16 '14 at 13:51

Active Jul 16 '14 at 13:51

Viewed 484 times

I use java GSS-API with kerberos. It works fine when I use host name like:

ldapUrl = ldap://myhost.mydomain.net

But when I user like:

ldapUrl = ldap://mydomain.net

it produces error: Server not found in Kerberos database. But mydomain.net is domain alias that present a pool of host. If I will select separate host from pool and use - works, when use alias - doesn't. What the reason?

asked Jul 16 '14 at 13:51

user710818

23,228
58
149
207

That only works with Reverse DNS. You cannot register the realm name as SPN. – Michael-O Jul 28 '14 at 21:26

Using domain alias instead of host name in kerberos authentication

0 Answers0