[Samba] how to run ktpass with a Samba AD DC?

Andrew Bartlett abartlet at samba.org
Fri Jan 20 20:20:21 UTC 2017

On Fri, 2017-01-20 at 12:57 -0700, Jeff Sadowski via samba wrote:
> I was trying to get authentication via kerberos working but I'm
> having
> trouble trying to run ktpass as in step 6 here
> http://robertan.com/home/2015/01/14/kerberos-auth-with-apachephp/
> ktpass -princ HTTP/contoso.com at CONTOSO.COM -mapuser
> CONTOSO\<USERNAME> -crypto all -ptype KRB5_NT_PRINCIPAL -pass
> <PASSWORD> -out webpage.HTTP.keytab
> I'm not sure of the syntax of even the microsoft command. In step 5
> it
> looked like they created a user apache but I don't see that in the
> command
> at all.

Thankfully we have a great wiki page with the right commands for the
Samba AD DC here:

Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

More information about the samba mailing list