Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KDC_ERR_S_PRINCIPAL_UNKNOWN Server not found in Kerberos database, when using multiple domains on local host. #198

Open
1 task done
zitjrs opened this issue Mar 21, 2022 · 0 comments
Labels

Comments

@zitjrs
Copy link

zitjrs commented Mar 21, 2022

Terraform CLI and Provider Versions

Terraform v1.1.5
on darwin_arm64

  • provider registry.terraform.io/hashicorp/azuread v2.10.0
  • provider registry.terraform.io/hashicorp/azurerm v2.73.0
  • provider registry.terraform.io/hashicorp/dns v3.2.1

Terraform Configuration

provider "dns" {
  update {
    server = var.dns_server
    gssapi {
      realm    = upper(domain)
      username = var.username
      password = var.password
    }


  }
}

Expected Behavior

Should use realm to determine which REALM it should authenticate against.

Actual Behavior

Always uses default_realm to authenticate against. not realm specified in gssapi

Steps to Reproduce

  1. terraform apply

How much impact is this issue causing?

Low

Logs

No response

Additional Information

As long as I try to authenticate to default_realm (PROD), everything works. when trying to authenticate to second domain(TEST), it fails with krbtgt/PROD.COM: KRB Error: (7) KDC_ERR_S_PRINCIPAL_UNKNOWN Server not found in Kerberos database. Client (MAC OSX Monterey) is not member of any of the domains. dnsserver is windows 2019 active directory controller.

KRB5.config
[libdefaults]
default_realm = PROD.COM
[realms]
PROD.COM = {
kdc = dc01.prod.com
kdc = dc02.prod.com
}

TEST.COM = {
kdc = testdc01.test.com
}

Code of Conduct

  • I agree to follow this project's Code of Conduct
@zitjrs zitjrs added the bug label Mar 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant