[Samba] Where is krb5.keytab or equivalent?

[Rowland penny]

On 27/06/16 19:59, Mark Foley wrote:
> On 2016-06-27 11:18 GMT+02:00 mathias dufresne wrote:
>
>> You can check which principal is in your keytab using klist: klist -k or
>> klist -ke /path/to/keytab
> Mathias, thank you. I've created the /etc/krb5.keytab per Rowland's instructions. And, per
> older instruction from when I first installed Samba4 2 years ago I've done:
>
> ln -s /etc/samba/private/krb5.conf /etc/krb5.conf
>
> The contents of which are:
>
> [libdefaults]
>      default_realm = HPRS.LOCAL
>      dns_lookup_realm = false
>      dns_lookup_kdc = true
>
> I don't know if I need that file or not, but the Dovecot people say I do. I now have those
> files (krb5.keytab and krb5.conf) in /etc.
>
> Now, the problem is I cannot do your suggested `klist` command, nor the `kinit` as described in
> https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Configure_Kerberos
>
> I don't seem to have these commands. Do these come with the Samba4 installation or are they
> supposed to already be on the system, or to be downloaded separately?
>
>
>

No they don't come with Samba, you will need to install krb5-user, but 
all klist will do is list the contents of a kerberos cache after a user 
runs 'kinit'

Rowland