[33265] in Kerberos

home help back first fref pref prev next nref lref last post

Trying to use Windows Netidmgr with Keytab

daemon@ATHENA.MIT.EDU (Murray Trainer)
Mon Mar 14 10:12:29 2011

Date: Mon, 14 Mar 2011 22:12:13 +0800 (WST)
From: Murray Trainer <mtrainer@central-data.net>
To: kerberos@mit.edu
Message-ID: <1367693620.7229.1300111933783.JavaMail.root@mailstore01.gopc.net>
In-Reply-To: <1900128301.7223.1300111851216.JavaMail.root@mailstore01.gopc.net>
MIME-Version: 1.0
Reply-To: Murray Trainer <mtrainer@central-data.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi,

I am using the latest Kerberos for Windows from Secure Endpoints.  I created the Windows DOS batch file below that obtains my kerberos 5 tickets using a keytab file.

set krb_user=murray
set KRB5CCNAME=FILE:c:\krb5cc_%krb_user%
set KRB5_KTNAME=\%krb_user%.keytab
kinit -5 -r 7d -k -t C:\%krb_user%.keytab %krb_user%@MYDOMAIN.NET
start /min C:\"Program Files"\MIT\Kerberos\bin\netidmgr.exe

The kinit line works and if I do a klist I have kerberos 5 tickets.  The last line in the script is intended to start Windows Netidmgr so it automatically renews these tickets using the keytab file.  Netidmgr starts and if I maximise it my identity is greyed out and my tickets don't get renewed unless I manually renew them by entering my password.  After that my tickets are renewed automatically.  Is there any way of making Netidmgr use the Keytab file instead of requiring passwords be entered?

Any assistance is appreciated

Thanks

Murray  


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post