Name

ktpass

Synopsis

ktpass /Out file /Princ user /Pass pass | * ^ /MapUser [/Crypto DES-CBC-MD5]

Generate a Kerberos keytab file for MIT Kerberos interoperability (designed to be merged with the existing /etc/krb5.keytab file on the Unix system). The main purpose of this command is to create account mappings for Unix Kerberos-aware services, enabling them to use the Windows 2000 KDC.

The listed options specify the name of the output file as well as the Kerberos principal username and password (use an asterisk to prompt for the password). /MapUser says to create the Kerberos principal-to-local-account mapping, associating that user account with the Unix service corresponding to the given Kerberos principal name. The listed /Crypto option changes the encryption scheme from CRC to MD5.

The command has additional options and capabilities; see W2RKSupp.Chm for details.

Get Windows 2000 Commands Pocket Reference now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial