Is a keytab file encrypted?

pratyush parimal pratyush.parimal at
Tue Jul 18 12:48:28 EDT 2017

Hi guys,

Kind of a noob question, but here it goes.
When I export a principal's key to a keytab file using the following

ktadd -k keytabfile service/host at REALM

(1) Does the keytabfile contain the key in encrypted form or as plaintext?
(2) Is it possible to export the key in encrypted form? If so, then how
does the service application open the encrypted keytab?


More information about the Kerberos mailing list