Next: , Previous: , Up: Setting up a realm   [Contents]


4.5 keytabs

To extract a service ticket from the database and put it in a keytab, you need to first create the principal in the database with ‘add’ (using the --random-key flag to get a random key) and then extract it with ‘ext_keytab’.

kadmin> add --random-key host/my.host.name
Max ticket life [unlimited]:
Max renewable life [unlimited]:
Attributes []:
kadmin> ext host/my.host.name
kadmin> exit
# ktutil list
Version  Type             Principal
     1   des-cbc-md5      host/my.host.name@MY.REALM
     1   des-cbc-md4      host/my.host.name@MY.REALM
     1   des-cbc-crc      host/my.host.name@MY.REALM
     1   des3-cbc-sha1    host/my.host.name@MY.REALM