CODEWITHSUNDEEP
active-directorykerberos
henry kay
henry kay

Reputation: 1

different server name for kerberos authentication

i have configured kerberos authentication when accessing to file server. there is no need for logging in when i map drive and acccess to the file server Just a curious question, if i can add additional server name to be used for authentication

for example.

currently my file server name is server01 when i map network drive through server01 / IP address, there is no issue. when i tried to access through a server name server02, then i get an error in mapping the drive.

is there any way i can do this by allowing multiple server name to be allowed for kerberos authentication ?

thanks in advance for any advise

Upvotes: 0

Views: 820

Answers (1)

Kartik Bhiwapurkar
Kartik Bhiwapurkar

Reputation: 5159

You can map as many file shares as possible you want with Kerberos authentication on a Windows domain joined system if the file servers hosting the file shares are joined to the same domain as the client Windows system accessing them.

Thus, you may have multiple file servers in your domain environment but they all should be joined to the AD domain for the Kerberos authentication to work successfully and let the users accessing and mapping the file shares authenticate through it as Kerberos needs a KDC (Key Distribution Center) due to which Active Directory authentication is required.

Please find the below dependencies for Kerberos authentication to work successfully: -

  1. Operating System --> Later then Windows 2000 for client and Windows 2003
  2. TCP/IP Network Connectivity --> Should exist between DC, client, and the target server
  3. Domain System --> DNS must be functioning and accessible for the client
  4. Active Directory Domain --> Necessary to use Kerberos authentication
  5. Time Service --> Time source should be same and synchronized on all the network computers
  6. Service Principal Names --> Kerberos authentication needs to have an SPN set for it so that clients can identify the service on the network

Also, refer this document for more details.

Upvotes: 0

Related Questions