samba - Jan 2012 - samba-tool and net ads

Hi

1. How do I do this:
samba-tool domain exportkeytab anyold.keytab --principal=samba4user
on a box without samba-tool?

2. Is anyold.keytab, valid only for the machine upon which it was created?

Thanks,
Steve