[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
extracting keytabs(ext works fine but...)
- To: email@example.com
- Subject: extracting keytabs(ext works fine but...)
- From: jay alvarez <firstname.lastname@example.org>
- Date: Mon, 11 Jul 2005 02:08:08 -0700 (PDT)
- DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=eD6CJNBBVear5SkWPBgRual9Bil6NXeP0tUXLDsbEVZOavGGpr2rhsccG6lZ/85+7S2Fpm3xLoDKTi2pH4SOX8ACKfJlcNVqLqN+HjLNvxoq2JO+ok5iIOL0UhW8c9xZnue0gwLsAn7YYI+wESUh8a+o8bOV08A0iedV48wqo18= ;
- In-Reply-To: <email@example.com>
- Sender: firstname.lastname@example.org
I haven't encountered this scenario before where I
needed to add additional keytabs for other services
that will run on a single host(not on the same host
that kadmin(kdc) is running. If the keytabs will all
reside in the localhost where kadmin is running(which
is also the kdc server), ext works automagically
appending newly extracted keys to my /etc/krb5.keytab.
But for other host that have existing keytabs, for a
single keytab, e.g; ldap/myhost.com, I do it like this
and then scp /tmp/gwenever.keytab to the etc of that
host(gwenever). But one time, I needed to have two
keytabs on that host(gwenever), one is the
host/gwenever and another is ldap/gwenever keytab, for
use with ldap client, and gssapi ssh login.
What I did was the delete gwenever's existing keytab
that contains only host/gwenever and then on the kdc..
I launched kadmin and did:
ext --keytab=/tmp/gwenever.keytab host/gwenever
ext --keytab=/tmp/gwenever.keytab ldap/gwenever
and finally scp'd it to gwenever.
When I typed ktutil list on gwenever, both needed
Question, is there any less stupid way of doing this,
instead of just deleting the old keytab, sort of just
appending only. :)
Sell on Yahoo! Auctions – no fees. Bid on great items.