[31350] in Kerberos
Re: Authenticating debian users against AD
daemon@ATHENA.MIT.EDU (kerberos@noopy.org)
Mon Aug 10 10:42:45 2009
MIME-Version: 1.0
In-Reply-To: <4A802307.9010301@anl.gov>
Date: Mon, 10 Aug 2009 10:42:18 -0400
Message-ID: <cba4e37e0908100742r1ce46855gb399ef479d88a6fc@mail.gmail.com>
From: kerberos@noopy.org
To: "Douglas E. Engert" <deengert@anl.gov>
Cc: jarek <jarek@nospam.pl>, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Aug 10, 2009 at 9:39 AM, Douglas E. Engert<deengert@anl.gov> wrote:
>
>
> Javier Palacios wrote:
>> Personally, I got many problems while using ktpass to create a keytab.
>
> We don't use it either, but msktutil instead. But Jarek was using ktpass
> so my suggestion was to understand what is going on under the covers
> and use ktpass correctly.
I like msktutil a lot but it's not always the case that one has rights
to change objects in AD. ktpass.exe (when used w/SP2 under Windows
2003) *can* simplify the process of keytab creation but OTOH I don't
think it solves the problem entirely/completely.
--
K
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
