I had been having some issues with keytab file that I created with ktab in JRE. So, as advised in the thread https://sourceforge.net/p/spnego/discussion/1003768/thread/960ba7ad I got a keytab file created by our Windows Active Directory administrators, as per command line syntax provided in the thread, which is
When I run the following command the ktab –l –k <keytabfile> it shows HTTP/YOURCOMPUTERNAMEHERE instead of the YOURUSERHERE. What am I doing wrong?
My primary problem is that I get following error in spnego : “Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC)”
I read the above thread which looks to be addressing this problem but the keytab file I got does not resolve the issue.
Please help.
Regards,
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hello,
I had been having some issues with keytab file that I created with ktab in JRE. So, as advised in the thread https://sourceforge.net/p/spnego/discussion/1003768/thread/960ba7ad I got a keytab file created by our Windows Active Directory administrators, as per command line syntax provided in the thread, which is
ktpass /princ HTTP/YOURCOMPUTERNAMEHERE@YOURDOMAINHERE.COM /mapuser YOURUSERHERE /pass YOURPASSWORDHERE /Target YOURDOMAINHERE.COM /out YOURKEYTABFILENAMEHERE.keytab /kvno 0 /crypto RC4-HMAC-NT /ptype KRB5_NT_PRINCIPAL
When I run the following command the ktab –l –k <keytabfile> it shows HTTP/YOURCOMPUTERNAMEHERE instead of the YOURUSERHERE. What am I doing wrong?
My primary problem is that I get following error in spnego : “Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC)”
I read the above thread which looks to be addressing this problem but the keytab file I got does not resolve the issue.
Please help.
Regards,
Correct.
If at all possible, do NOT use the ktpass.exe utility.
Instead, follow these instructions...
http://spnego.sourceforge.net/client_keytab.html
http://spnego.sourceforge.net/server_keytab.html
If you run across any issues using the ktab.exe utility, please post to the Help Forum.