Skip to main content

SETSPN

Beginner
Posts: 1
Comments: 1

When running these commands is the "targetservername" the name of the server set inside of Access Connect?

- setspn -a afpserver/servername.company.com targetservername 
- setspn -a afpserver/servername targetservername

Forum Member
Posts: 0
Comments: 48

Hi,

setspn is not the part of Access Connect. However, you may require to run these commands if you are going to use Kerberos logons which provides support for single sign-on to your network resources. For the Mac to get a Kerberos ticket via AFP you need both a long and a short SPN. You can use the setspn command with the "-l" switch to list:

You should see two lines for "afpserver/" (long and short):
- afpserver/servername.company.com
- afpserver/servername

Please refer to the Microsoft KB for more details about the syntax (see: "Adding SPNs").

Thanks!

Beginner
Posts: 1
Comments: 1

I need to use kerberos, thus the reason I asked this question. You're answer is a direct copy and paste out of the documentation I've already found which doesn't answer the question I asked.

I have my Macs bound to my AD so I need them to use kerberos for Acronis so they don't have to authenticate everytime or clutter/confuse their keychain with unneeded passwords.