On pe, 16 elo 2019, Boyd Ako via FreeIPA-users wrote:
Thanks. Is there any way to test the keytab?
Obtain ticket granting ticket (TGT) with a keytab: KRB5_TRACE=/dev/stderr kinit -k -t /path/to/keytab.file name-of-principal Obtain a service ticket after the above: KRB5_TRACE=/dev/stderr kvno -S host ipa.master.hostname If the first one works, then keytab is good. If the second one works, then KDC recognizes your TGT. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
