[30151] in Kerberos
Re: Creating an MIT style keytab for an existing Windows AD member
daemon@ATHENA.MIT.EDU (Russ Allbery)
Wed Jul 23 20:56:17 2008
To: kerberos@mit.edu
In-Reply-To: <20080723193354.GW25547@Sun.COM> (Nicolas Williams's message of
"Wed\, 23 Jul 2008 14\:33\:54 -0500")
From: Russ Allbery <rra@stanford.edu>
Date: Wed, 23 Jul 2008 17:55:20 -0700
Message-ID: <87wsjcf6dj.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Nicolas Williams <Nicolas.Williams@sun.com> writes:
> On Wed, Jul 23, 2008 at 02:01:43PM -0400, Michael B Allen wrote:
>> Extracting the keys from AD is not possible [1].
> Nor ist it possible to extract them from MIT krb5 KDCs.
It is as of 1.6 using kadmin.local (not that this changes the rest of your
point).
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
