Host name of KDC for SPNEGO?

[Former Member]

Hi,

Is the Host name of the Key Distribution Center the same as the Active Directory Domain.

We have only one active directory domain, the domain is mycompany.internal.

Will the host name of the KCD will also be mentioned as mycompany.internal in the spnego wizard?

Regards

Deb

Edited by: Debasish Sarkar on Oct 20, 2008 7:25 PM

[Former Member · Accepted solution]

Hi,

Enter the hostname of your domain controller for KDC. If you have multiple domain controllers then you can use the

option "Add KDC" in the wizard and additional hostnames.

Cheers!!

[Former Member · Accepted solution]

Hi Kiran,

So the KDC will be mycompany.internal in this case.

Regards

Deb

[Former Member · Accepted solution]

Hi,

We have only one active directory domain, its mycompany.internal.

XYZ is one of the active directory servers in this domain. Hence the fully qualified domain name for XYZ is xyz.mycpmpany.internal.

The primary domain controller is xyz the fully qualified name of this server is xyz.mycompany.internal.

We have created the service user j2ee-ecd in the xyz ADS server.

Now, when configuring SPNEGO through wizard, whats are the value to be provided in the following parameters:

Realm Name: mycompany.internal

KDC Host: ?

Principal Name: ?

Regards

Deb

[Former Member · Accepted solution]

Hi,

These should be your likely parameters

Realm Name: mycompany.internal

KDC Host: xyz.mycompany.internal

Kerberos Principal Name

Service User: j2ee-ecd

Service User Password: PWD for above service user

LDAP Host: xyz.mycompany.internal

LDAP Port: usually 389

Cheers!!

[Former Member · Accepted solution]

Hi Kiran,

Thanks for that explanation.

The Priniciapl name will be j2ee-ecd or j2ee-ecd(AtTheRate)MYCOMPANY.INTERNAL ?

Regards

Deb

Edited by: Debasish Sarkar on Oct 21, 2008 9:03 PM

[Former Member · Accepted solution]

j2ee-ecd

Cheers!!

[Former Member · Accepted solution]

Hi,

The spnego wizard mentions to set it as <serviceuser>(AtTheRate)<DOMAIN>

In the ADS server, I have set the following command:

setspn -A Http/<J2EE Host NAME> j2ee-ecd

So which one to mention as the Principal name in my case.

Regards

Deb

Edited by: Debasish Sarkar on Oct 21, 2008 9:16 PM

[Former Member · Accepted solution]

It should be j2ee-ecd.

I suggest you to take a look at the following blog.

Cheers!!