Groups | Search | Server Info | Login | Register


Groups > comp.protocols.kerberos > #5377

Re: kadm5.acl "e" permission

From Stefan Kania <stefan@kania-online.de>
Newsgroups comp.protocols.kerberos
Subject Re: kadm5.acl "e" permission
Date 2025-02-07 19:07 +0100
Organization Stefan Kania
Message-ID <mailman.148.1738951660.2322.kerberos@mit.edu> (permalink)
References <85f142f8-99d7-4a9a-8b0a-20219525fe45@kania-online.de> <eb065857-45f8-4c79-b7f8-131aacf9687c@mit.edu> <29e78a8d-05e2-4732-8b6c-bbe611f7c5df@kania-online.de>

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw


Am 07.02.25 um 17:07 schrieb Greg Hudson:
> On 2/7/25 08:58, Stefan Kania wrote:
>> in the kadm5.acl the "*" or the "x" gives all permission but not the 
>> permission to extract the principal keys for this it the "e" 
>> permission. Can some please explain to me how can I extract the 
>> principal key if I have the "e" permission. I can't find anything that 
>> explain how to do it.
> 
> The kadmin "ktadd -norandkey" command will extract principal keys to a 
> keytab file without generating new keys as it normally does.
> 
Thank you, that was exactly what I was looking for :-)

Back to comp.protocols.kerberos | Previous | Next | Find similar


Thread

Re: kadm5.acl "e" permission Stefan Kania <stefan@kania-online.de> - 2025-02-07 19:07 +0100

csiph-web