[Samba] Generating keytabs for other hosts

[steve]

On Tue, 2014-01-21 at 12:43 +0000, Damien Dye wrote:

> 
> 
> whats the correct procedure to creating spn and keytabs purely form the
> samba 4 DC as I can't see any detailed guidance on the wiki.

Hi
You don't need much detail as you already have what you need.

Create spns and keytabs on the DC:

samba-tool spn add --help
samba-tool domain exportkeytab --help

will get you there.

Move the keytabs where you want them using a USB memory. Then delete
from the memory.

There is a useful keytab which is produced when you join a unix box to a
domain using net. You can sometimes make use of the keys therein. If you
want to create keytabs on a unix client then you can use ktutil.

Loadsa alternatives. . .
HTH
Steve