Passwordless access to kadmin?

Russ Allbery rra at stanford.edu
Tue Jul 17 13:29:39 EDT 2007


"Bryan K. Wright" <bryan at ayesha.phys.virginia.edu> writes:

> 	But as a side-effect of this, I can then no longer
> get into kadmin by typing "kadmin -p root/admin" and supplying
> a password.  If I try, kadmin tells me the password is bad.

Yes, when you create a keytab for a principal, it randomizes the
password.

> 	What do I need to do to make both of these work?

Don't use the same account for interactive use and for scripted use.
Instead, create a new principal for scripted use and add it to kadm5.acl.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list