How to set the SPN for Postgres SSPI

Question

I am trying to setup Postgres to support SSPI/Kerberos, however I think that I have not found out what the correct SPN that is needed to get it working.

The background details:

• Service account for postgres: 'postgres'
• Domain Name: 'testdomain.com'
• Domain Controller: 'dc.testdomain.com'

I have tried the following SPNs and have had zero luck:

• setspn -A HOST/testdomain.com postgres
• setspn -A HOST/testdomain postgres
• setspn -A POSTGRES/testdomain.com postgres
• setspn -A POSTGRES/testdomain postgres
• setspn -A POSTGRES/dc.testdomain.com postgres

Does anyone have some suggestions?

Answer 1

The correct way to do this is:

setspn -A postgres/machinename.domainname serviceaccount