Problem with the ktpass.exe with Windows 2003 Server

Douglas E. Engert deengert at anl.gov
Mon Apr 17 12:04:55 EDT 2006



Andrés Abadía wrote:

> Hello, i was trying to use the ktpass this way:
>    
>   ktpass -princ nssldap/servidor at PROYECTODEGRADO.COM -pass password -mapuser root -out servidor.keytab.

The mapuser has to be an AD account that will will represent the machine
or the specific service on the machine. Don't use root. It should be more like
"ldap-servidor".

The principal name should had a FQDN.

You have to have administrator authoritory in AD to add and update the account when you run this.


>    
>   and the prompt gave me this message:
>    
>   Targeting domain controller: servidor.proyectodegrado.com
>   Using legacy password setting method
>   Succesfully mapped nssldap/servidor to root
>   Aborted
>    
>   but I can`t find the file servidor.keytab because i need this file to merge to the unix host.
>    
>   I need help with this, I don't know if the command ktpass did the process correctly and i don't know where is located the file.
>    
>   thanks for you attention.
>    
>   Andres Abadia
> 
> 		
> ---------------------------------
> 
> LLama Gratis a cualquier PC del Mundo.
> Llamadas a fijos y móviles desde 1 céntimo por minuto.
> http://es.voice.yahoo.com
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444



More information about the Kerberos mailing list