[23285] in Kerberos
Re: Problem using ktpass under Windows 2003
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Mon Jan 31 10:31:44 2005
Message-ID: <41FE4EAA.1090601@anl.gov>
Date: Mon, 31 Jan 2005 09:28:42 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: =?ISO-8859-1?Q?Florian_Preu=DF?= <florian-preuss@gmx.net>
In-Reply-To: <16614.1107163801@www4.gmx.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Normally the ktpass is only used for service accounts like
for a host, -princ host/myworkstation.test.net@TESY.NET
not for a user, as this would reset the user password.
Florian Preuß wrote:
> Hi,
>
> I have a problem generating a keytab file using ktpass.
>
> The command I use:
> ktpass -princ replic@TEST.NET -mapuser replic -pass password -out
> krb5.keytab
>
> The error message:
> Targeting domain controller: domainc.test.net
> Failed to set property "servicePrincipalName" to "TEST" on Dn
> "CN=test,OU=Servic
> es,OU=Test,DC=test,DC=net": 0x13.
> WARNING: Unable to set SPN mapping data.
> If test already has an SPN mapping installed for TEST, this is no cause
> for concern.
> Key created.
> Output keytab to krb5.keytab:
> Keytab version: 0x502
> keysize 44 TEST@TEST.NET ptype 1 (KRB5_NT_PRINCIPAL) vno 4 etype 0x3 (DES-C
You must have run this before, as it is upto kvno 4, and it may have set the SPN
from some previous attempt. Did you use the user TEST the first time you run this?
> BC-MD5) keylength 8 (0xda686262b5cb760b)
> Account test has been set for DES-only encryption.
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
