[squid-dev] Support lower case http/ spn format for realmd/adcli join support.

Mike Surcouf mikes at surcouf.co.uk
Thu Jun 28 15:02:17 UTC 2018


Adding to this after testing more I realised that adcli does not lower case the SPN. 
I am not sure how I came to that conclusion sorry for noise.

-----Original Message-----
From: squid-dev [mailto:squid-dev-bounces at lists.squid-cache.org] On Behalf Of Mike Surcouf
Sent: 28 June 2018 09:28
To: 'Amos Jeffries'
Cc: squid-dev at lists.squid-cache.org
Subject: Re: [squid-dev] Support lower case http/ spn format for realmd/adcli join support.

Hi Amos thanks for that I need to correct you on the REALM bit though.

The bit before the slash in an SPN (service principal name) is SERVICE not REALM

So for a computer that has a 
service =service
fqdn= SomeComputer.example.com
REALM= EXAMPLE.COM

service/SomeComputer.example.com at EXAMPLE.COM

So for a computer that has a 
service =HTTP
fqdn= SomeComputer.example.com
REALM= EXAMPLE.COM

HTTP/SomeComputer.example.com at EXAMPLE.COM
_______________________________________________
squid-dev mailing list
squid-dev at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev


More information about the squid-dev mailing list