Recommnended way to get krb5.keytab files for KfW installations on Windows

Holger Rauch holger.rauch at empic.de
Mon Oct 26 07:15:50 EDT 2009


Hi,

since the kadmin utility is not included with the current KfW bundle
from the MIT Kerberos web site (version 3.2.2), is it "safe" to
create krb5.keytab files for KfW using kadmin on a Unix machine and
transfer the file to the Windows box?

(Yes, I heard about ktpass.exe, but that's kind of awkward to use
because of the username/principal mapping stuff that needs to be taken
into account. Or is ktpass.exe the recommended utility and the kadmin
on Unix+file transfer approach thus discouraged?)

I'm using KfW on a current (all updates applied) WinXP Professional
system.

So, what's the easiest (and recommended) way to get krb5.keytab files
that are usable by KfW installations?

(I need this for accessing a kerberized Samba server, a kerberized
sshd using PuTTY/WinSCP, and a kerberized FTP server; all of these
services are running on the same host).

Thanks for any hints & kind regards,

       Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20091026/0fc4ef65/attachment.bin


More information about the Kerberos mailing list