Generating krb5.keytab

Sergey Yanovich ynvich at
Wed Jun 11 20:18:24 GMT 2008

Andrew Bartlett wrote:
> On Tue, 2008-06-10 at 17:04 +0400, Matthieu PATOU wrote:
>> Is it possible to generate this file ? I tried with kadmin but got this error message:
>> kadmin: Client not found in Kerberos database while initializing kadmin interface

If you provisioned your installation with setup/provision, chances are 
that {prefix}/private/krb5.keytab is the file you need.

> We don't support the kadmin interface (because it is different between
> MIT and Heimdal, and we didn't want to lock in our choice of krb5
> implementation, even if I have strong views on it :-).

I believe providing Heimal-style kadmin interface on Heimdal-based KDC 
is a right thing to do. Otherwise, expect this question in different 
forms to be a frequent visitor to this mailing list :)

Sergey Yanovich
Abstract Accounting Ltd.

More information about the samba-technical mailing list