W7 Kerberos Authentication to Unix KDC

hi everybody,

i'm trying authenticate w7 client unix kdc (kerberos) have issue can't understand.

windows computer name = wincptname

windows user account name = winusrname

unix kdc = kdc.example.com

unix realm = example.com

kdc principal = usrppl@example.com

i've followed steps describe in http://technet.microsoft.com/en-us/library/bb742433.aspx#edaa:

1. on kdc, have 2 principals:

• host/wincptname.example.com@example.com (with password of "wincptpwd")
• usrppl@example.com (the user has account on kerberized application -> mapped windows user)

2. on windows, have setup kerberos using ksetup:

• ksetup /setdomain example.com
• ksetup /addkdc example.com kdc.example.com
• ksetup /addkpasswd example.com kdc.example.com
• ksetup /setmachpassword wincptpwd

3. restart computer

4. using ksetup:

• ksetup /mapuser usrppl@example.com winusrname

then if try login computer wincptname\winusrname, can see in unix kdc logs error showing windows tried authenticate wincptname$@example.com , not usrppl@example.com.

i can't find why happen , why there "$" after computer name (which shouldn't computer name kerberos principal mapped...).

i happy if help me on topic, thank you. regards,

morgan

hi morgan,

thank posting.

i trying involve familiar topic further @ issue. there might time delay. appreciate patience.

best regards,

amy wang

Windows Server  >  Directory Services