[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: extracting keytabs(ext works fine but...)



On Mon, 2005-07-11 at 07:46 -0400, Brandon S. Allbery KF8NH wrote:
> If you're running kadmind on the master KDC host, you can run kadmin on
> any machine and "ext" will work just as it does on the KDC.
> 
> If you prefer not running kadmind for some reason, then generate a
> temporary keytab on the KDC host, scp it to the target host, and use
> "ktutil copy" to append its entries to the host's existing keytab (man
> ktutil).

Oh, and if you're running kadmind on the master KDC then you can use
"ktutil get" on the client host to generate a new host key and append it
to the keytab in one fell swoop.

-- 
brandon s. allbery   [linux,solaris,freebsd,perl]      allbery@kf8nh.com
system administrator      [WAY too many hats]        allbery@ece.cmu.edu
electrical and computer engineering, carnegie mellon univ.         KF8NH