Hello,
I connect some users by AD with kerberos Realm : user@MYDOMAIN.COM on captive portal. All run fine.
But, for security raisons, I need to mask domain name.
Is it possible to display ie “XXXX.COM” on captive portal on domain choice and make forward authentification to real name MYDOMAINE.COM.
I try to make a XXXX.COM domain on DNS, put dns lookup realm to yes. Put on _kerberos TXT “MYDOMAINE.COM” my realdomain, put all default kerberos tcp, udp and kpasswd pointing to real AD server.
But no success, when I try to check with kinit user@XXXX.COM I get message : kinit(v5): KRB5 error code 68 while getting initial credentials
Thanks for your help.