[Samba] Problem with keytab: "Client not found in Kerberos database"

Achim Gottinger achim at ag-web.biz
Wed Dec 21 00:54:16 UTC 2016

Am 20.12.2016 um 14:50 schrieb Brian Candler via samba:
> (2) Can "net ads keytab create" be told to extract just a single named 
> principal? That would simplify things. But I can't see how to.
> As usual... clues gratefully received.
samba-tool domain exportkeytab [keytabfile] --principal=[SPN or UPN]

In your case

samba-tool domain exportkeytab /etc/krb5.keytab --principal=WRN-RADTEST$

More information about the samba mailing list