Infrastructure/howtos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add doc on how to create a keytab

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2021-03-30 10:12:13 +02:00
parent 685156e387
commit 8dc5f17b3c
1 changed files with 40 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

40
create_keytab.md Normal file
View file

@ -0,0 +1,40 @@
# How to create a keytab for an user?
First obtain Kerberos ticket with kinit:
```
$ kinit myusername@FEDORAPROJECT.ORG
Password for myusername@FEDORAPROJECT.ORG:
```
Then obtain kvno value:
```
$ kvno myusername@FEDORAPROJECT.ORG
myusername@FEDORAPROJECT.ORG: kvno = 42
```
Ticket is no longer needed and can be destroyed:
```
$ kdestroy -p myusername@FEDORAPROJECT.ORG
```
Generate keytab and write it to disk:
```
$ ktutil
ktutil: addent -password -p myusername@FEDORAPROJECT.ORG -k 42 -f
Password for myusername@FEDORAPROJECT.ORG:
ktutil: wkt /tmp/kt/fedora
ktutil: q
```
Done. You can now use the keytab to obtain the ticket without typing password:
```
$ kinit -kt /tmp/kt/fedora myusername@FEDORAPROJECT.ORG
```
(source: https://pagure.io/fedora-infrastructure/issue/9544#comment-706949)