kadmin ktadd -e keysaltlist for des-cbc-md5

Tom Simons tom.simons at gmail.com
Tue Sep 12 17:18:04 EDT 2006


I'm trying to get a keytab with des-cbc-md5 encryption (no salt) from our
kerberos 1.5 realm for a CyberSafe client. How do I specify the ktadmin
ktadd command's "-e keysaltlist" parameter?  I tried variations on "ktadd -k
<filename> -e ENCTYPE_DES_CBC_MD5:NONE", but get the same error:

    kadmin:  ktadd -k host.TESTMIT.keytab -e ENCTYPE_DES_CBC_MD5:NOSALT
    ktadd: Invalid argument while parsing keysalts ENCTYPE_DES_CBC_MD5



More information about the Kerberos mailing list