[Samba] Where is krb5.keytab or equivalent?

Mark Foley mfoley at ohprs.org
Mon Jun 27 18:47:45 UTC 2016


> ... you don't get the /etc/krb5.keytab by default on a DC, you will need 
> to create it:
>
> samba-tool domain exportkeytab /etc/krb5.keytab

Excellent! Thank you. I've done that now, but I have more issues more appropriate to a reply to mathias' message following.

--Mark

-----Original Message-----
> To: samba at lists.samba.org
> From: Rowland penny <rpenny at samba.org>
> Date: Mon, 27 Jun 2016 08:09:47 +0100
> Subject: Re: [Samba] Where is krb5.keytab or equivalent?
>
> > I am running Samba 4.1.23 as an AD/DC. It has been running file for more than 1 1/2 years as a
> > AD/DC for mostly Windows workstations.
> >
> > I'm trying to setup Dovecot with gssapi authentication. The config needs the location of the service
> > keys located in the keytab file. The default location it looks for is:
> >
> > /etc/krb5.keytab
> >
> > There is no such file there, nor is there a so-named file on the AD/DC at all. I do find:
> >
> > /etc/samba/private/secrets.keytab
> > /etc/samba/private/dns.keytab
> >
> > Is one of these what I can use for the Dovecot required config?
> >
> > THX --Mark
> >
>
> Hi, you don't get the /etc/krb5.keytab by default on a DC, you will need 
> to create it:
>
> samba-tool domain exportkeytab /etc/krb5.keytab
>
> Rowland
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba



More information about the samba mailing list