Forum Discussion
Josh_Becigneul_
Nimbostratus
NimbostratusAPM AD auth and multi-domain forest
Hi All, Let me preface this by saying that I am a Linux guy who pokes at Active Directory once in a blue moon.
I've been trying to work through this problem but so far have not had any great result...
Rabbit23_116296Nimbostratus
NimbostratusCheck your DNS. Each domain needs to be reverse resolvable. If you can't configure that you can specify the Kdc Servers in /etc/krb5.conf
Then is the userprincipalname ad attribute configured correctly? Should be host/svc_f5.foo.bar.com@foo.bar.com
Setting it up that will then Kerberos delegation will work with all trusted forests and constrained delegation within the bar.com forest