You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@directory.apache.org by Enrique Rodriguez <en...@gmail.com> on 2007/04/04 21:48:39 UTC

Re: Apache DS / Kerberos / Keytab

On 4/4/07, Mike Wiesner <mw...@interface21.com> wrote:
> Hi Enrique,
>
> do you know if there is a possibility to extract a keytab from an apache
> ds user which has kerberos attributes? I need this for a kerberos service.

It's #3 on my list:

http://cwiki.apache.org/confluence/display/DIRxSBOX/Security+Initiatives

Under the heading "Key export."  SASL is ready to merge and I have key
derivation mostly working.  So, key export is next.  Maybe in 1-2
months.

I currently use 'ktutil' for creating keytabs.  The key derivation
algorithm is the same, so if you use the same principal name and
password when you import users into the Directory and when you make
keys with ktutil, it will work.

Enrique