Forum GLPI-Project

KBron

Member

Registered: 2024-02-26

Posts: 1

GLPI Active Directory User registered as SPN with UserLogin Permission

Hello Community,

I have a strange topic and I hope you can give me some advice.
First of all, here are some important informations:

- GLPI 10.0.5
- Ubuntu 20.4
- Azure AD Oath
- Azure AD SSO

Today I checked with this Command (Powershell), if there are any SPNs in my environment:
Get-ADUSer -Filter { ServicePrincipalName -ne "$null"} -Properties ServicePrincipalName | select SamAccountName, ServicePrincipalName

And here appears our AD User für GLPI.
This User also manage the Mail-connector incl. Azure Oauth Authentication.

Now to my question:
Is it necessary that the GLPI-User is "member" of SPN-Group (registered as SPN)?
If not, I will remove the SPN.

Thanks a lot

Best regards
KBron