Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-6018: How to find duplicate servicePrincipalName (SPN) or hosts on Active Directory from Unix/Linux host

Authentication Service ,  

21 March,17 at 04:59 PM

Applies to: All Centrify DirectControl version on All supported Linux/Unix Platforms
 
Question:
Is there a way to find duplicate servicePrincipleName (SPN) or hosts on Active Directory from Unix host?
 
Answer:
Yes.  There is a way to find duplicate servicePrincipelName (SPN) or hosts by using ‘ldapsearch’ command.
 
Run the following command as root on Unix/Linux host to find out the computer object with duplicate SPN:
 
# /usr/share/centrifydc/bin/ldapsearch -m -Q -LLL -H "ldap://" -b <Base_DN> '(servicePrincipalName=*/<Hostname>*)' dn serviceprincipalname

(Substitute <Base_DN> with the Distinguished name (DN) of domain and <Hostname> with the name of computer account)

For example:
# /usr/share/centrifydc/bin/ldapsearch -m -Q -LLL -H "ldap://" -b "dc=lab,dc=local" "(serviceprincipalname=*/computer*)" dn serviceprincipalname

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part I articleKerberos SSO - Handling Disjointed Active Directory and UNIX DNS namespaces with Centrify article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part III articleKB-2095: Why does adinfo show "Warning! Unable to locate computer's subnet site in Active Directory. Please advise your system administrator." article[Labs] Using Centrify+AD+YubiKey to secure UNIX/Linux access with Strong Authentication article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part II articleA Playbook to secure your Amazon AWS Infrastructure using Centrify and Active Directory - Part 5 article[TIPS] A Centrify Server Suite Cheat Sheet