Home / server / Questions / 877837
In Process
Maciej Piechotka
Asked: 2017-10-11 10:23:14 +0800 CST

Can I create keytab for authentication of user in unix server

  • 772

I have a service which needs to authenticate against another service using Kerberos. Normal credentials expire rather quickly - can I create a keytab or something for the service to get the ticket without password?

I don't have admin for Kerberos server but I do have local admin for AD member.

linux

1 Answers

  1. In short, yes, but you're going to need to involve your AD Admin and they are going to have to set an SPN on the user object your keytab refers to.

    I know this because we've used a few of these in one of my production environments. Hope it helps you out.

    https://technet.microsoft.com/en-us/library/cc731241(v=ws.11).aspx

    • 0