Forum Discussion
Steve_Janetzke_
Nimbostratus
We were able to figure it out. We had to add the "host/apmkerb.svc" as an SPN for apmkerb.svc even though it got a TGT for host/apmkerb.svc@TEST.DOMAIN.COM when it tried to fetch the S4U ticket it first sent a TGS to the domain with that Sname. A packet capture on the DC revealed it and it is now fetching the S4U ticket correctly.
RecontuerSG_258
Dec 15, 2016Historic F5 Account
Hello. I have met with this issue instead
Kerberos: can't get S4U2Self ticket for user davis@GTSL.COM - Matching credential not found
Any idea?
Thanks!