ktpassメモ

gistfile1.txt

AESでktpass
ktpass -princ HTTP/[email protected] -mapuser http-somehost -crypto AES256-SHA1 -ptype KRB5_NT_SRV_HST +rndPass -out somehost.keytab

RC4でktpassして2008 DCに対してkinitするとき
[libdefaults]
default_tkt_enctypes =  rc4-hmac
default_tgs_enctypes =  rc4-hmac

kinit(v5): Key table entry not found while getting initial credentials


$ kinit -kt http-hostname.keytab HTTP/hostname.example.com
$ klist
Ticket cache: FILE:/tmp/krb5cc_9999
Default principal: HTTP/[email protected]

Valid starting     Expires            Service principal
08/30/10 19:02:41  08/31/10 05:02:42  krbtgt/[email protected]
        renew until 08/31/10 19:02:41


Kerberos 4 ticket cache: /tmp/tkt9999
klist: You have no tickets cached