krb5-probe

Overview ¶

Maintainer-only diagnostic: exercises gokrb5's password-mode AS-REQ directly, with verbose error reporting, to disambiguate AD-vs-gokrb5 preauth issues from masterzen/winrm wrapping noise. Reads HVLAB_* and the local krb5.conf; prints the full error chain on failure and the TGT principal on success.

set -a; source .env.local; set +a
go run ./hack/krb5-probe