[23286] in Kerberos
Re: Problem using ktpass under Windows 2003
daemon@ATHENA.MIT.EDU (=?ISO-8859-1?Q?=22Florian_Preu=DF=)
Mon Jan 31 11:45:20 2005
Date: Mon, 31 Jan 2005 17:44:42 +0100 (MET)
From: =?ISO-8859-1?Q?=22Florian_Preu=DF=22?= <florian-preuss@gmx.net>
To: kerberos@mit.edu
MIME-Version: 1.0
Message-ID: <5242.1107189882@www26.gmx.net>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
I found the problem,
I was using Heimdal Kerberos instead of MIT.
THX for help!
> Normally the ktpass is only used for service accounts like
> for a host, -princ host/myworkstation.test.net@TESY.NET
> not for a user, as this would reset the user password.
>
> Florian Preuß wrote:
> > Hi,
> >
> > I have a problem generating a keytab file using ktpass.
> >
> > The command I use:
> > ktpass -princ replic@TEST.NET -mapuser replic -pass password -out
> > krb5.keytab
> >
> > The error message:
> > Targeting domain controller: domainc.test.net
> > Failed to set property "servicePrincipalName" to "TEST" on Dn
> > "CN=test,OU=Servic
> > es,OU=Test,DC=test,DC=net": 0x13.
> > WARNING: Unable to set SPN mapping data.
> > If test already has an SPN mapping installed for TEST, this is no
> cause
> > for concern.
> > Key created.
> > Output keytab to krb5.keytab:
> > Keytab version: 0x502
> > keysize 44 TEST@TEST.NET ptype 1 (KRB5_NT_PRINCIPAL) vno 4 etype 0x3
> (DES-C
>
> You must have run this before, as it is upto kvno 4, and it may have set
> the SPN
> >from some previous attempt. Did you use the user TEST the first time you
> run this?
>
>
> > BC-MD5) keylength 8 (0xda686262b5cb760b)
> > Account test has been set for DES-only encryption.
> >
>
> --
>
> Douglas E. Engert <DEEngert@anl.gov>
> Argonne National Laboratory
> 9700 South Cass Avenue
> Argonne, Illinois 60439
> (630) 252-5444
>
--
GMX im TV ... Die Gedanken sind frei ... Schon gesehen?
Jetzt Spot online ansehen: http://www.gmx.net/de/go/tv-spot
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
