GetUserSPNs.py doesn't return any entry

Hi, I am trying to use GetUserSPNs.py on my lab to get TGT. I am using this command:

$ python3 GetUserSPNs.py -request  -dc-ip 10.0.2.200 domain.local/myuser
Impacket v0.9.25.dev1+20220105.151306.10e53952 - Copyright 2021 SecureAuth Corporation

Password:
No entries found!

Password is correct.

Anyway, if I look for SPNs on domain controller (10.0.2.200) with:

setspn -T domain.local -F -Q */*

I do see some SPNs.
Any help ?
Thank you!

What’s the output of you use the -debug option?

Sorry for my delay!

[+] Impacket Library Installation Path: /usr/lib/python3/dist-packages/impacket
Password:
[+] Connecting to 10.0.2.200, port 389, SSL False
[+] Total of records returned 3
No entries found!

Hi, I think I founded the issue.
On my test domain controller (10.0.2.200) I actually haven’t “users” SPNs.

I have lots of results with command:

setspn -T domain.local -Q */*

but they are only “OU=Computers” or “OU=Domain controllers”, not OU=users.
Now I just added an SPN with

setspn -a DOMAIN/someuser.domain.local:54321 DOMAIN\someuser

and I am able to get TGT with GetUserSPNs.py