Document Details
Kerberos
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
windows_first
⚠️
windows_tools
⚠️
powershell_heavy
⚠️
missing_linux_example
Summary:
The documentation demonstrates a Windows bias by consistently prioritizing Windows/Active Directory terminology, tools, and workflows. Windows-specific tools (such as PowerShell, MMC, and setspn) are mentioned exclusively for managing Kerberos and SPNs, with no equivalent Linux commands or tools provided. Examples and troubleshooting steps focus on Windows environments, and Linux/UNIX scenarios are only briefly mentioned, often as afterthoughts or in notes. There are no practical Linux command examples (e.g., kinit, ktutil, klist, or how to manage keytabs/SPNs on Linux), and guidance for Linux administrators is minimal.
Recommendations:
- Provide Linux/UNIX command-line examples alongside Windows/PowerShell ones (e.g., show how to use kinit, klist, ktutil, and how to create/manage keytabs and SPNs on Linux).
- Include instructions for managing Kerberos principals and keytabs in non-Active Directory KDCs (such as MIT Kerberos or Heimdal), or at least clarify that only AD is supported and provide workarounds or references.
- When describing workflows (such as SPN creation or troubleshooting), add Linux/UNIX-specific steps and tools (e.g., using ldapsearch, realm, or sssd).
- Balance terminology: introduce and explain both Windows and Linux Kerberos concepts and tools in parallel, rather than defaulting to Windows/AD-centric language.
- Add troubleshooting sections for common Linux client issues (e.g., krb5.conf misconfiguration, keytab issues, DNS problems) with relevant log file locations and diagnostic commands.
- Ensure that all configuration and workflow diagrams include both Windows and Linux perspectives where applicable.
Create pull request
Scan History
| Date | Scan ID | Status | Bias Status |
|---|---|---|---|
| 2025-07-12 23:44 | #41 | in_progress | ❌ Biased |
| 2025-07-12 00:58 | #8 | cancelled | ✅ Clean |
| 2025-07-10 05:06 | #7 | processing | ✅ Clean |
Flagged Code Snippets
Kerberos Realm: CONTOSO.COM
KDC Vendor: Microsoft
KDC IP Address: x.x.x.x
KDC Port: 88
Clock Skew: 5
Active Directory Server Name: dc1.contoso.com
Active Directory Server IP Address: x.x.x.x
Comment: -
Admin Server IP Address: x.x.x.x
Admin Server Port: 749
Password Server IP Address: x.x.x.x
Password Server Port: 464
Permitted Encryption Types: aes-256
- Configured by Azure NetApp Files administrator in the portal
- Automatically configured by the service using Active Directory connection information/system defaults