Skip to content

Keytabs

Jump to bottom Edit New page
le photograveur edited this page Jun 10, 2023 · 2 revisions

To extract a service ticket from the database to put into a keytab, you will first need to create that principal in the database via kadmin add using the --random-key flag to generate a random key. You can then extract that key with ext_keytab.

kadmin> add --random-key host/my.host.name
Max ticket life [unlimited]:
Max renewable life [unlimited]:
Attributes []:
kadmin> ext host/my.host.name
kadmin> exit
# ktutil list
Version  Type             Principal
     1   des-cbc-md5      host/my.host.name@MY.REALM
     1   des-cbc-md4      host/my.host.name@MY.REALM
     1   des-cbc-crc      host/my.host.name@MY.REALM
     1   des3-cbc-sha1    host/my.host.name@MY.REALM
Add a custom sidebar

Clone this wiki locally