跳转到主内容

为什么在通过 IP 连接到 CIFS 服务器时不使用 kerberos？

  1. 最后更新
  2. 另存为PDF
Views:
34
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

适用于

  • ONTAP
  • 服务主体名称 (SPN)
  • Storage Virtual Machine (SVM)
  • Active Directory (AD)
  • Kerberos

问题解答

  • 要使用 Kerberos，客户端必须根据 Active Directory 中 SVMs 计算机帐户的 SPN（服务主体名称）获取 Kerberos 票证。
  • 由于 SPN 基于服务器名称，因此如果通过 IP 连接，则无法（通常）获得 Kerberos 票证。
  • 从 Windows 10 版本 1507 和 Windows Server 2016 开始，可以将 Kerb 客户端配置为支持 SPN 中的 IPv4 和 IPv6 主机名

追加信息

您可以使用例如 ADSI Edit 查找机器帐户的 servicePrincipalName 属性。
NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.