Generating Keytabs

Revision as of 11:07, 5 February 2014 by Damien.dye (talk | contribs) (Created page with " Active directory requires kerberos service principle names to be mapped to a user account before a keytab can be generated. you can add spn names using the samba-tool provided…")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)


Active directory requires kerberos service principle names to be mapped to a user account before a keytab can be generated.

you can add spn names using the samba-tool provided with your samba 4 installation.

samba-tool spn add host/fdqn@KerberosRealm sAMAccount

this should return without error.