[Samba] Generating keytabs for other hosts

steve steve at steve-ss.com
Tue Jan 21 08:16:58 MST 2014

On Tue, 2014-01-21 at 12:43 +0000, Damien Dye wrote:

> whats the correct procedure to creating spn and keytabs purely form the
> samba 4 DC as I can't see any detailed guidance on the wiki.

You don't need much detail as you already have what you need.

Create spns and keytabs on the DC:

samba-tool spn add --help
samba-tool domain exportkeytab --help

will get you there.

Move the keytabs where you want them using a USB memory. Then delete
from the memory.

There is a useful keytab which is produced when you join a unix box to a
domain using net. You can sometimes make use of the keys therein. If you
want to create keytabs on a unix client then you can use ktutil.

Loadsa alternatives. . .

More information about the samba mailing list