Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a strange problem with an Active Directory SPN Account.

This does not work: kinit HTTP/

However, "setspn -l SA_MyUser" lists "HTTP/" as registered service principal. It has got to be a problem withthe AD account, but what could it be?

share|improve this question
Can you share some more details please? Do you get an error for your kinit attempt? Have you taken a network trace to see if the request for the service ticket is going to the right KDC? Is the domain where the SA_MYUSER in MY.REALM? where are you doing the kinit from? Is it a member of the MY.REALM ? – maweeras Jul 16 '11 at 19:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.