• Active Directory,  Mac OS X Server,  Mac Security

    Managing the Keytab with ktutil

    clear_list – Clears the current keylist  read_kt or rkt – Reads a krb5 keytab into the current keylist  read_st or rst – Reads a krb4 srvtab into the current keylist  write_kt or wkt – Writes the current key listing into a krb5 keytab  write_st or wst – Writes the current key listing to a krb4 srvtab  add_entry or addent – Adds an entry to the current key listing  delete_entry, delent – Deletes an entry from the current key listing  list – Lists the current key listing  list_requests or lr – Lists available keys 

  • Mac OS X Server

    Kerberos Keys

    Kerberos uses keys to transmit information between hosts.  There are  session keys and service keys kept in the keytab file on the KDC.  The KDC (Key Distribution Center) then does out keys as needed.  To see the service keys: klist -k /etc/krb5.keytab