Creating a keytab for an AD user

Greg Hudson ghudson at mit.edu
Mon Sep 24 10:43:17 EDT 2018


On 09/24/2018 04:04 AM, Mark Pröhl wrote:
> A question to the developers of MIT Kerberos: is there an API in libkrb5
> to get the salt string from a KDC replay?

We do not.  Now that I have read windows-salt.txt, I will dust off 
https://github.com/krb5/krb5/pull/670 and revise and integrate it 
(soonish), so it should appear in 1.17.

As part of the revisions, I had been planning on renaming the new API to 
krb5_get_etype_info().  Please let me know if you think any other 
changes are needed for msktutil's purposes.


More information about the krbdev mailing list