[31616] in Kerberos

home help back first fref pref prev next nref lref last post

Recommnended way to get krb5.keytab files for KfW installations on

daemon@ATHENA.MIT.EDU (Holger Rauch)
Mon Oct 26 07:16:34 2009

Date: Mon, 26 Oct 2009 12:15:50 +0100
From: Holger Rauch <holger.rauch@empic.de>
To: kerberos@mit.edu
Message-ID: <20091026111550.GA1241@heitec.de>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0106221036=="
Errors-To: kerberos-bounces@mit.edu


--===============0106221036==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="DocE+STaALJfprDB"
Content-Disposition: inline


--DocE+STaALJfprDB
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

since the kadmin utility is not included with the current KfW bundle
=66rom the MIT Kerberos web site (version 3.2.2), is it "safe" to
create krb5.keytab files for KfW using kadmin on a Unix machine and
transfer the file to the Windows box?

(Yes, I heard about ktpass.exe, but that's kind of awkward to use
because of the username/principal mapping stuff that needs to be taken
into account. Or is ktpass.exe the recommended utility and the kadmin
on Unix+file transfer approach thus discouraged?)

I'm using KfW on a current (all updates applied) WinXP Professional
system.

So, what's the easiest (and recommended) way to get krb5.keytab files
that are usable by KfW installations?

(I need this for accessing a kerberized Samba server, a kerberized
sshd using PuTTY/WinSCP, and a kerberized FTP server; all of these
services are running on the same host).

Thanks for any hints & kind regards,

       Holger
--DocE+STaALJfprDB
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkrlhOYACgkQbiVtWpZdKQICGACdGWoaORZaZfBq2CoZXxWOIf5/
/hMAnisTmaKlkrSnxBIvQLKXsIKQWDia
=9Wo9
-----END PGP SIGNATURE-----

--DocE+STaALJfprDB--

--===============0106221036==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============0106221036==--

home help back first fref pref prev next nref lref last post