[squid-dev] Support lower case http/ spn format for realmd/adcli join support.
Eliezer Croitoru
eliezer at ngtech.co.il
Mon Jul 9 18:00:01 UTC 2018
Mike,
It's better to have some noise around rather then slow and deadly
silence.
Eliezer
On 2018-06-28 18:02, Mike Surcouf wrote:
> Adding to this after testing more I realised that adcli does not lower
> case the SPN.
> I am not sure how I came to that conclusion sorry for noise.
>
> -----Original Message-----
> From: squid-dev [mailto:squid-dev-bounces at lists.squid-cache.org] On
> Behalf Of Mike Surcouf
> Sent: 28 June 2018 09:28
> To: 'Amos Jeffries'
> Cc: squid-dev at lists.squid-cache.org
> Subject: Re: [squid-dev] Support lower case http/ spn format for
> realmd/adcli join support.
>
> Hi Amos thanks for that I need to correct you on the REALM bit though.
>
> The bit before the slash in an SPN (service principal name) is SERVICE
> not REALM
>
> So for a computer that has a
> service =service
> fqdn= SomeComputer.example.com
> REALM= EXAMPLE.COM
>
> service/SomeComputer.example.com at EXAMPLE.COM
>
> So for a computer that has a
> service =HTTP
> fqdn= SomeComputer.example.com
> REALM= EXAMPLE.COM
>
> HTTP/SomeComputer.example.com at EXAMPLE.COM
> _______________________________________________
> squid-dev mailing list
> squid-dev at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev
> _______________________________________________
> squid-dev mailing list
> squid-dev at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev
--
----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il
More information about the squid-dev
mailing list