[Samba] net ads commands and princs in krb5.keytab

[Rick Brown]

I don't think this is possible, but it should be!

I want to use net ads commands for administrators on the command line
without including the domain admin accounts password.

Currently, I'm doing so via command lines such as:
net ads password username at .AD.DOMAIN.EDU \
	-U admin_user at AD.DOMAIN.EDU%admin_password users_new_password

/net ads search sAMAccountName=username \
	-U admin_user at AD.DOMAIN.EDU%admin_password

I can't stand having to include admin passwords on the command line,
and worse yet in the php scripts that call 'em.

What I'd prefer is to be able to use a krb5 princ in
/etc/krb5.keytab such as one would with kinit or kadmin with -p
and -k arguments.   Is this currently possible (but undocumented),
or planned for future development?

[         Rick Brown               ][      (404) 894-6175           ]
[ Office of Information Technology ][    rick at oit.gatech.edu 	    ]
[ Georgia Institute of Technology  ][  258 4th street. Atlanta, GA  ]