Need to use ktpass to get a keytab for a machine account to feed into Wireshark ... can I change the machine account password on a node?

Richard Sharpe realrichardsharpe at
Tue Nov 17 20:25:32 UTC 2015

On Tue, Nov 17, 2015 at 12:04 PM, Uri Simchoni <uri at> wrote:
> I added two methods to this page, should get what you want. The online one
> (net ads keytab create) is the easiest. The offline one uses ktpass, but
> feeds the password, which you can recover from secrets.tdb. This is a
> non-intrusive method which does not involve the directory - you can run it
> on any machine with ktpass.

Ahhh, that looks exactly what I want. So simple, especially the net
ads keytab CREATE -P, which I should have known about!

Richard Sharpe

More information about the samba-technical mailing list