Tuesday, August 20, 2013

MIT Kerberos 5 Survives (SuSE Linux)

Start Kerberos Admin Shell
# kadmin.local
kadmin> listprincs

Create a principal
kadmin> ank articy

Create another principal named articy/admin,
kadmin> ank articy/admin


Assign kerberos admin role to articy/admin
add below entry into /var/lib/kerberos/krb5kdc/kadm5.acl

 articy/admin       *

restart Kerberos and its admin service
service kadmind  restart
service kbd restart

Start kadmin shell
# kadmin -p articy/admin
kadmin> listprincs

Create a principal for machine:
kadmin> ank -randkey host/was.goweekend.ca@GOWEEKEND.CA

Extract the key for the host principal to a keytab file
kadmin> ktadd -k /var/tmp/was.goweekend.ca.keytab host/was.goweekend.ca

No comments:

Post a Comment