[Samba] Generating keytabs for other hosts
steve at steve-ss.com
Tue Jan 21 08:16:58 MST 2014
On Tue, 2014-01-21 at 12:43 +0000, Damien Dye wrote:
> whats the correct procedure to creating spn and keytabs purely form the
> samba 4 DC as I can't see any detailed guidance on the wiki.
You don't need much detail as you already have what you need.
Create spns and keytabs on the DC:
samba-tool spn add --help
samba-tool domain exportkeytab --help
will get you there.
Move the keytabs where you want them using a USB memory. Then delete
from the memory.
There is a useful keytab which is produced when you join a unix box to a
domain using net. You can sometimes make use of the keys therein. If you
want to create keytabs on a unix client then you can use ktutil.
Loadsa alternatives. . .
More information about the samba