[Samba] generate keytab

Andrew Bartlett abartlet at samba.org
Fri Dec 21 19:24:05 MST 2012


On Thu, 2012-12-20 at 14:44 -0200, Clodonil Trigo wrote:
> Hi Kleb Valoshka,
> 
> thereby I did.
> 
> $ samba-tool user add proxy-user
> $ samba-tool user setexpiry proxy-user -noexpiry
> $ samba-tool spn add http/proxy-user proxy.nisled.org
> $ samba-tool spn add http/proxy.nisled.org proxy-user
> 
> does not work,
> 
> Clodonil
> 
> 
> 
> 2012/12/20 Hleb Valoshka <375gnu at gmail.com>
> 
> > On 12/20/12, Clodonil Trigo <clodonil at nisled.org> wrote:
> > > $ samba-tool user add proxy-user
> > > $ samba-tool user setexpiry proxy-user -noexpiry
> > > $ samba-tool spn add http/proxy-user proxy.nisled.org
> >
> > Find the difference:
> >
> > samba-tool spn add http/proxy.nisled.org proxy-user
> >
> > > $ samba-tool domain exportkeytab /etc/proxy.keytab --principal=http/
> > > proxy.nisled.org

At this point some idea of the errors you got where it 'does not work'
would be helpful, as would the output of ktlist on the generated keytab:

ktutil
rkt /etc/proxy.keytab
list

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org




More information about the samba mailing list