[31616] in Kerberos
Recommnended way to get krb5.keytab files for KfW installations on
daemon@ATHENA.MIT.EDU (Holger Rauch)
Mon Oct 26 07:16:34 2009
Date: Mon, 26 Oct 2009 12:15:50 +0100
From: Holger Rauch <holger.rauch@empic.de>
To: kerberos@mit.edu
Message-ID: <20091026111550.GA1241@heitec.de>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0106221036=="
Errors-To: kerberos-bounces@mit.edu
--===============0106221036==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="DocE+STaALJfprDB"
Content-Disposition: inline
--DocE+STaALJfprDB
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi,
since the kadmin utility is not included with the current KfW bundle
=66rom the MIT Kerberos web site (version 3.2.2), is it "safe" to
create krb5.keytab files for KfW using kadmin on a Unix machine and
transfer the file to the Windows box?
(Yes, I heard about ktpass.exe, but that's kind of awkward to use
because of the username/principal mapping stuff that needs to be taken
into account. Or is ktpass.exe the recommended utility and the kadmin
on Unix+file transfer approach thus discouraged?)
I'm using KfW on a current (all updates applied) WinXP Professional
system.
So, what's the easiest (and recommended) way to get krb5.keytab files
that are usable by KfW installations?
(I need this for accessing a kerberized Samba server, a kerberized
sshd using PuTTY/WinSCP, and a kerberized FTP server; all of these
services are running on the same host).
Thanks for any hints & kind regards,
Holger
--DocE+STaALJfprDB
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkrlhOYACgkQbiVtWpZdKQICGACdGWoaORZaZfBq2CoZXxWOIf5/
/hMAnisTmaKlkrSnxBIvQLKXsIKQWDia
=9Wo9
-----END PGP SIGNATURE-----
--DocE+STaALJfprDB--
--===============0106221036==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0106221036==--