Creating an MIT style keytab for an existing Windows AD member computer

Russ Allbery rra at
Wed Jul 23 20:55:20 EDT 2008

Nicolas Williams <Nicolas.Williams at> writes:
> On Wed, Jul 23, 2008 at 02:01:43PM -0400, Michael B Allen wrote:

>> Extracting the keys from AD is not possible [1].

> Nor ist it possible to extract them from MIT krb5 KDCs.

It is as of 1.6 using kadmin.local (not that this changes the rest of your

Russ Allbery (rra at             <>

More information about the Kerberos mailing list