Return
-
Title
WARNING: 503 host.keytab has SPN entries that are not in AD. -
Description
This error is occuring when running vastool status commands or the MCU is reporting it. -
Cause
If additional serviceprincipalname entries are added to the keytab that do not have matching entries this error can occur. -
Resolution
If the entries are required they would need to be added to the computer object in AD as well since they require matching entries.
To see the list of SPN's attached to a computer object command will provide them.
/opt/quest/bin/vastool -u host/ attrs host/ serviceprincipalname
To see the list in keytab this command will display them.
/opt/quest/bin/vastool ktutil list