Displaying 6 results from an estimated 6 matches for "krb5_nt_principal".
2009 May 06
0
Kerberos tickets problem
...HOSTNAME
HOST/hostname.domain.com (FQDN)
I also setup a service account name (user object) on Windows whose name is
same as the hostname (computer object). I generated the keytab file with
ktpass -princ host/fqdn@REALM -mapuser DOMAIN\SERVICEACCT$ -pass password
-crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL -out c:\temp\krb5.keytab
I then ftped this file over to Solaris host and try to authenticate a user
login via AD, I get
PAM-KRB5 (auth): krb5_verify_init_creds failed: Server not found in Kerberos
database
So, just for the heck of it I generated another krb5.keytab with the
following...
2016 Jun 27
3
Looking for GSSAPI config [was: Looking for NTLM config example]
...ktutil: quit
I'm using a windows 2003 r2 server as domain controller, to create a
keytab file you need the windows 2003 support tools.
ktpass.exe -princ imap/mailserver.gcecad-service.nl at GCECAD-SERVICE.LOCAL
-mapuser GCECAD-SERVICE\mail-imap -crypto RC4-HMAC-NT -pass koeltje234
-ptype KRB5_NT_PRINCIPAL -out mail-imap.keytab
ktpass.exe -princ smtp/mailserver.gcecad-service.nl at GCECAD-SERVICE.LOCAL
-mapuser GCECAD-SERVICE\mail-smtp -crypto RC4-HMAC-NT -pass koeltje234
-ptype KRB5_NT_PRINCIPAL -out mail-smtp.keytab
Most instructions on the internet do not quite work out that well.
RC4-HMAC-NT...
2017 Jan 20
3
how to run ktpass with a Samba AD DC?
I was trying to get authentication via kerberos working but I'm having
trouble trying to run ktpass as in step 6 here
http://robertan.com/home/2015/01/14/kerberos-auth-with-apachephp/
ktpass -princ HTTP/contoso.com at CONTOSO.COM -mapuser
CONTOSO\<USERNAME> -crypto all -ptype KRB5_NT_PRINCIPAL -pass
<PASSWORD> -out webpage.HTTP.keytab
I'm not sure of the syntax of even the microsoft command. In step 5 it
looked like they created a user apache but I don't see that in the command
at all.
even if I was able to run it I don't know what arguments to put in.
I saw...
2011 Mar 10
1
Dove cot+Kerberos
...tandart - AD
mail server: Gentoo + cyrus-sasl + postfix + dovecot with support
ldap&kerberos.
I am created a 4 keytabs on Windows box.
C:\Users\Admin>ktpass -princ host/srv-mail.cn.energy at CN.ENERGY -mapuser
ldapmail at CN.ENERGY -pass "superpasswd" -crypto RC4-HMAC-NT -ptype
KRB5_NT_PRINCIPAL -out c:\mail.keytab
etc... for all
imap/srv-mail.cn.energy
pop/srv-mail.cn.energy
smtp/srv-mail.cn.energy
host/srv-mail.cn.energy
On Linux server:
ktutils
ktutils: rkt /root/Keytab/imap.keytab
ktutils: rkt /root/Keytab/smtp.keytab
ktutils: rkt /root/Keytab/pop.keytab
ktutils: rkt /root/Keytab/ho...
2009 May 04
2
bad encryption type in AD domain authentication
Hello,
I'm trying to access a samba share using an ADS user credentials. I always
get an error, and the debug traces (log level = 5) are giving me the output
in the follow.
I have searched the samba ML archives, and I have found the thread
http://lists.samba.org/archive/samba/2004-April/084545.html
but, before asking the system admin to apply the eventual KB fixes, I would
like to know if the
2016 Jun 27
4
Looking for GSSAPI config [was: Looking for NTLM config example]
On 27.06.2016 07:31, Mark Foley wrote:
> Thanks for the reply. When you say it [NTLM] "should" work, I understand you to be implying
> you've not actually tried NTLM yourself, right? I've never gotten a response from someone
> saying they have or are actually using it. Your subsequent messages about NTLM v[1|2] may be
> the problem, but email clients I've tried