On 11/28/2011 09:46 AM, John Hodrien wrote:

On Sun, 27 Nov 2011, Josh Geisser wrote:

Yes, totally confused :)

Thanks to you guy's I got it working now. But what I don't get is how
Kerberos keys are handled in general. The /etc/krb5.keytab is a container,
can I take both, UPN and SPN?

Yes.  My understanding is the only difference between a service principal and
a user principal is that the KDC will not issue a ticket granting ticket to a
service principal.

jh

Yes and it is no wonder because UPN and SPN serve a different task. I recommend searching MS technet for this. They have a nice explanation for this.