|
Posted by johnny on April 28, 2006, 5:06 pm
Please log in for more thread options The application registers the spn by calling DsGetSpn followed by
DsWriteAccountSpn. We have also tried setting it with ADSI edit.
Shakti
> How exactly are you trying to set them.
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> Author of O'Reilly Active Directory Third Edition
> www.joeware.net
>
>
> ---O'Reilly Active Directory Third Edition now available---
>
> http://www.joeware.net/win/ad3e.htm
>
>
>
> Johnny wrote:
>> Thanks for the response. Yes this is in reference to Kerberos entities.
>> The SPN allows
>> us to use the syntax I mentioned but for some reason it does not work
>> with spaces in the servicename part (which accroding to docmumentation
>> can be the distinguished name or ldap name of the service). Delegation
>> of impersonated credentials to a remote server fails because the remote
>> server receives the "anonymous logon" credential.
>>
>> Thanks for any help
>>
>> Shakti
>>> SPNs are Kerberos entities and they make use the the Kerberos
>>> canonical name. The distinguished names you mention sound like
>>> Ldap names.
>>>
>>>> Hello,
>>>>
>>>> We need to set up the service principal name for a service in this
>>>> format
>>>>
>>>> <class>/<host:port>/<service name>
>>>>
>>>> we provide the distinguished name of the service in question. However
>>>> we found that this cannot have spaces in them. Surely distinguished
>>>> names of objects can have spaces in them. Can you suggest a solution to
>>>> this. If we use object guid what format do we enter that?
>>>>
>>>> Thanks
>>>> Shakti
>>>>
>>>
>>
| 
XML Sitemap