AnsweredAssumed Answered

Endpoint AD Authentication - Server 2016+

Question asked by Stuart Green on Jan 30, 2019
Latest reply on Feb 5, 2019 by Maksym Sofer

From the Endpoint Security Management Server R80.20 Administration Guide there's a process to get AD ready for kerberos authentication which looks like:



Running this on Server 2016 doesn't work as the command errors out with the following:

Targeting domain controller:
Failed to retrieve values for property ?????????: 0x10.
Failed to set property 'servicePrincipalName' to 'cpepauthsrv/' on Dn 'CN=Check Point Endpoint Authentication,OU=Service Accounts,DC=domain,DC=com': 0x32.
WARNING: Unable to set SPN mapping data.
If cpepauth already has an SPN mapping installed for cpepauthsrv/, this is no cause for concern.
Failed to retrieve user info for cpepauth: 0x5.

What needs changing in order to make this work on Server 2016?