I have a functionnal samba linked with AD, through an MIT kerberos. The KDC is the domain controller, and is a windows AD server.
There is one point not working. There are 2 UPN suffixes. One obviously with the same name of the AD domain, and working. And one other.
How could i configure the kerberos client to authenticate successfully with the different upn suffix ?
The authenticating is working with toto@DOMAIN1.LAN, even if his upn suffix in AD is @DOMAIN2.COM. But it must be a SSO solution, and they want to log in their windows account with toto@DOMAIN2.COM. How should i proceed ?