Re: extracting keytabs(ext works fine but...)

["Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>]

On Mon, 2005-07-11 at 02:08 -0700, jay alvarez wrote:
>   I haven't encountered this scenario before where I
> needed to add additional keytabs for other services
> that will run on a single host(not on the same host
> that kadmin(kdc) is running. If the keytabs will all
> reside in the localhost where kadmin is running(which
> is also the kdc server), ext works automagically
> appending newly extracted keys to my /etc/krb5.keytab.

If you're running kadmind on the master KDC host, you can run kadmin on
any machine and "ext" will work just as it does on the KDC.

If you prefer not running kadmind for some reason, then generate a
temporary keytab on the KDC host, scp it to the target host, and use
"ktutil copy" to append its entries to the host's existing keytab (man
ktutil).

-- 
brandon s. allbery   [linux,solaris,freebsd,perl]      allbery@kf8nh.com
system administrator      [WAY too many hats]        allbery@ece.cmu.edu
electrical and computer engineering, carnegie mellon univ.         KF8NH