[squid-dev] Support lower case http/ spn format for realmd/adcli join support.

Eliezer Croitoru eliezer at ngtech.co.il
Mon Jul 9 18:00:01 UTC 2018


Mike,

It's better to have some noise around rather then slow and deadly 
silence.

Eliezer

On 2018-06-28 18:02, Mike Surcouf wrote:
> Adding to this after testing more I realised that adcli does not lower
> case the SPN.
> I am not sure how I came to that conclusion sorry for noise.
> 
> -----Original Message-----
> From: squid-dev [mailto:squid-dev-bounces at lists.squid-cache.org] On
> Behalf Of Mike Surcouf
> Sent: 28 June 2018 09:28
> To: 'Amos Jeffries'
> Cc: squid-dev at lists.squid-cache.org
> Subject: Re: [squid-dev] Support lower case http/ spn format for
> realmd/adcli join support.
> 
> Hi Amos thanks for that I need to correct you on the REALM bit though.
> 
> The bit before the slash in an SPN (service principal name) is SERVICE 
> not REALM
> 
> So for a computer that has a
> service =service
> fqdn= SomeComputer.example.com
> REALM= EXAMPLE.COM
> 
> service/SomeComputer.example.com at EXAMPLE.COM
> 
> So for a computer that has a
> service =HTTP
> fqdn= SomeComputer.example.com
> REALM= EXAMPLE.COM
> 
> HTTP/SomeComputer.example.com at EXAMPLE.COM
> _______________________________________________
> squid-dev mailing list
> squid-dev at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev
> _______________________________________________
> squid-dev mailing list
> squid-dev at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev

-- 
----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il


More information about the squid-dev mailing list