Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've got a strange problem with an Active Directory SPN Account.

This does not work: kinit HTTP/my.host.com@MY.REALM

However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service principal. It has got to be a problem withthe AD account, but what could it be?

share|improve this question
Can you share some more details please? Do you get an error for your kinit attempt? Have you taken a network trace to see if the request for the service ticket is going to the right KDC? Is the domain where the SA_MYUSER in MY.REALM? where are you doing the kinit from? Is it a member of the MY.REALM ? –  maweeras Jul 16 '11 at 19:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.