Herramientas de usuario

Herramientas del sitio


generating_keytabs

Adding SPN's and Generating keytabs

Generating Keytabs


Active directory requires kerberos service principle names to be mapped to a user account before a keytab can be generated.

You can add spn names using the “samba-tool” provided with your Samba 4 installation.

 samba-tool spn add host/fdqn@KerberosRealm sAMAccount 

To then generate a keytab for that principle again using the “samba-tool” run the following:

 samba-tool domain exportkeytab  name.keytab  --principal=host/fdqn@KerberosRealm

This should then produce the keytab for the principle that you have exported and this can then be copied to your target machine or service.

generating_keytabs.txt · Última modificación: 2022/11/02 17:58 por 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki