Page History

...

Negotiate/Kerberos

If you want to use the Negotiate/Kerberos authentication scheme you need to find out the "Key Distribution Center" (KDC) which is a service that supplies session tickets and temporary session keys to users and computers within an Active Directory domain. If you don't know your KDC address do as follows:

• On Windows CMD or powershell

> nltest /dsgetdc:<domain.name>

The KDC address will appear in the first line as "DC: <the KDC address>"

• On Linux bash:

$ cat /etc/krb5.conf

Look for something like:

    [realms]
	TESTDOM.LAN = {
		kdc = DC1.TESTDOM.LAN
		admin_server = DC1.TESTDOM.LAN
	}