Return
-
Title
How to set up new entries and clear out old entries for a keytab. -
Description
How to set up new entries and clear out old entries for a keytab.
-
Resolution
To list what is in your keytab file run 'vastool ktutil -k <path to keytab file > list'. For example, see below:
# vastool ktutil -k /etc/opt/quest/vas/host.keytab list
/etc/opt/quest/vas/host.keytab:
Vno Type Principal
318 aes128-cts-hmac-sha1-96 host/stewie.cs-unix.ca@CS-UNIX.CA
318 aes128-cts-hmac-sha1-96 STEWIE$@CS-UNIX.CA
318 aes128-cts-hmac-sha1-96 cifs/stewie.cs-unix.ca@CS-UNIX.CA
318 aes128-cts-hmac-sha1-96 host/STEWIE@CS-UNIX.CA
Etc.To Remove:
Vastool ktutil remove -p < principal>
For example:
vastool ktutil remove -p host/stewie.cs-unix.ca@CS-UNIX.CA