Stack Overflow
Stack Overflow

Questions tagged [keytab]

110 questions
43
votes
3 answers

When using --negotiate with curl, is a keytab file required?

The documentation describing how to connect to a kerberos secured endpoint shows the following: curl -i --negotiate -u : "http://:/webhdfs/v1/?op=..." The -u flag has to be provided but is ignored by curl. Does the --negotiate…
Chris Snow
  • 23,813
  • 35
  • 144
  • 309
37
votes
1 answer

What is a keytab exactly?

I am trying to understand how Kerberos works and so came across this file called Keytab which, I believe, is used for authentication to the KDC server. Just like every user and service(say Hadoop) in a kerberos realm has a service principal, does…
white-hawk-73
  • 856
  • 2
  • 10
  • 24
17
votes
6 answers

Script Kerberos Ktutil to make keytabs

I want to make a script that will generate the a keytab using ktutil. When running the script I want to use [user]$ script.sh PASSWORD #script.sh echo "addent -password -p PRINCIPAL -k 1 -e aes256-cts-hmac-sha1-96" | ktutil Ktutil than needs a…
OrigamiEye
  • 864
  • 1
  • 12
  • 31
14
votes
1 answer

What goes on when using kinit with a keytab file

Wish to get more understanding on the use of kinit and keytab file. For example, if I already have a keytab file generated for a service ( the service registered to active directory by ktpass -mapuser to someuseraccount ) ktab -k "mykeytab" -a…
dorothy
  • 1,213
  • 5
  • 20
  • 35
9
votes
1 answer

Pre-authentication failed: Password read interrupted while getting initial credentials

This is something I have faced and I found the solution. since there wasn't any question about it, I will post it as a question and I will write my solution as the answer. Environment: OS: Centos Linux, MacOS (Big Sur) Cluster: Cloudera Hadoop…
Alper t. Turker
  • 34,230
  • 9
  • 83
  • 115
8
votes
1 answer

Has keytab got a lifetime?

I've have a keytab that is scheduled to run daily(just once) to renew it's ticket. However, I wanted to find out whether keytab itself has any lifetime? I assume it doesn't as the cron job has been configured to execute daily which i think will…
RajK
  • 141
  • 2
  • 8
7
votes
1 answer

How is a password encrypted into a keytab file?

I am using keytab files on Linux systems to authenticate services with kerberos. I am wondering how this password is actually stored into that keytab file. As we know in /etc/passwd the passwords are stored after applying a one-way hashing method -…
user4344563
7
votes
2 answers

How does keytab work exactly?

i have some questions on using keytab for Authentication hope the kind people here can enlightend me Say, i have userA who is going to use a service running at port 1010. First, userA will login to Active Directory to authenticate himself. After…
dorothy
  • 1,213
  • 5
  • 20
  • 35
6
votes
1 answer

What is the correct format to specify SPN?

First, the Service principal name is registered for a user using setspn command. setspn -a CS/dummy@abc.com dummyuser setspn -l dummyuser gives the output as CS/dummy@abc.com Next, when ktpass command is executed with /mapUser option, the…
Vanathi
  • 195
  • 4
  • 18
6
votes
2 answers

Connecting to Hive via Beeline using Kerberos keytab

Is it possible to connect to Hive via beeline using (kerberos) keytab file similar to the approach used for JDBC at…
malughanshyam
  • 61
  • 1
  • 1
  • 4
6
votes
1 answer

Creating a keytab to use with kinit in Windows

I am writing a pGina plugin to get AFS Tokens and a Kerberos TGT from our KDC at login, while writing I noticed a 'feature' of kinit being that it wont let you provide any input unless its from the keyboard, there went my idea of just redirecting…
rolands
  • 312
  • 1
  • 4
  • 14
5
votes
1 answer

How to initialize a keytab in docker?

I have a krb5.conf file. I created a keytab and checked it as expalined here. In docker file I added all of it to the container FROM java:8 ADD krb5.conf /etc/krb5.conf ADD evkuzmin.keytab /etc/evkuzmin.keytab ADD scripts/ /opt/scripts/ ADD…
Evgenii
  • 389
  • 3
  • 7
  • 21
5
votes
1 answer

JSch can't connect via Kerberos keytab file

I built a Java application, which runs a command via ssh. In the first attempt I authenticated via username and password, and everything worked fine. Now I want to use a Kerberos keytab file to make the authentication, but this makes problems! Here…
D. Müller
  • 3,336
  • 4
  • 36
  • 84
5
votes
2 answers

Retrieve password from kerberos keytab file

I am using hadoop with kerberos keytab file name userid.keytab for a long while. But now i m not aware the password. Is it anyway to get password from the keytab file.
Saran
  • 169
  • 4
  • 14
4
votes
1 answer

What is needed to generate kerberos keytab file on windows?

I was looking for answer to above question on different web sites but in the every case there was how to generate keytab file. I need keytab to get hbase connection which contains kerberos authentication.
Michal Kowalczyk
  • 43
  • 1
  • 1
  • 4
1
2 3 4 5 6 7 8