[Samba] Where is krb5.keytab or equivalent?

Rowland penny rpenny at samba.org
Mon Jun 27 07:09:47 UTC 2016

On 27/06/16 04:27, Mark Foley wrote:
> I am running Samba 4.1.23 as an AD/DC. It has been running file for more than 1 1/2 years as a
> AD/DC for mostly Windows workstations.
> I'm trying to setup Dovecot with gssapi authentication. The config needs the location of the service
> keys located in the keytab file. The default location it looks for is:
> /etc/krb5.keytab
> There is no such file there, nor is there a so-named file on the AD/DC at all. I do find:
> /etc/samba/private/secrets.keytab
> /etc/samba/private/dns.keytab
> Is one of these what I can use for the Dovecot required config?
> THX --Mark

Hi, you don't get the /etc/krb5.keytab by default on a DC, you will need 
to create it:

samba-tool domain exportkeytab /etc/krb5.keytab


More information about the samba mailing list