active directory - kinit(v5): Client not found in Kerberos database while getting initial credentials -


I am working on configuring the SSO in object 11.1.1.7.14, where I face problems in phase While configuring Krb5.conf while executing the kinit command.

Some notes regarding Active Directory

  • We have more than one domain controller and to balance the request Load Balancer with port of 3269.
  • And the integration between Obiae and MSAD is done successfully with the name load balancer as host and port as 3269.
  • Some certificates, Demotrust.jks and OVD stores and SSL have been enabled in the new provider.
  • The Keytab file was modified and modified accordingly in obiee domains home, krb5.conf and krb5login.conf file.

    I have created the tabbed file and it obiee domain home, then KDC was revised as one of the IP address of the domain controller, krb5.conf was modified and the name of the domain controller As an administrator-server and

    kinit -V -k -t /location/keytabfile.keytab HTTP / obiee_host_name

    I have received And the error " kinit (v5): The customer was not found in the Krebroos database when getting initial credentials ". Please share your thoughts / suggestions to resolve this issue.

    First of all, this is the server default.

    1. 3269 is not Kerberos, it is a SSL-backed global catalog. Pure LDAP is not interesting here.
    2. Do not enter KDC IP addresses in krb5.conf , but rather trust Windows SRV records like Windows does.
    3. You can not do with kinit kinit with an SPN to UPN (AD) from keytab, something like accountname $ @ EXAMPLE.COM If this machine account. Always remember, an SPN always is connected to some account, whether machine or functional.

Comments

Popular posts from this blog

php - PDO bindParam() fatal error -

logging - How can I log both the Request.InputStream and Response.OutputStream traffic in my ASP.NET MVC3 Application for specific Actions? -

java - Why my included JSP file won't get processed correctly? -