Ubuntu
krb5 package

  1. Bug #571572
  2. Comment #11

Comment 11 for bug 571572

Revision history for this message
Sam Hartman (hartmans) wrote : Re: [Bug 571572] Re: krb5 prefers the reverse pointer no matter what for locating service tickets.

In terms of work arounds, if your KDC is an AD KDc, you can add the
final hostnames as ServicePrincipalName attributes on AD for the account
in question. That should make things work either for a Windows server
or for a 1.7+ MIT server.

If your KDC is Unix you can add principals for the final hostnames. If
your eventual server is Windows you'll need to make sure the key and
salt is the same for all these principals. If your server is Unix,
simply add all the keys to the keytab.

--Sam