-
-
Save rmdes/ef47d0520e5cc249f429c9932628d6b8 to your computer and use it in GitHub Desktop.
Verify keytab files
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The contents of keytab file can be verified using either Unix/linux ktutil or klist commands or java ktab utility. | |
(1) | |
-bash-3.2$ ktutil | |
ktutil: rkt krba01.keytab | |
ktutil: list | |
slot KVNO Principal | |
---- ---- ------------------------------------------------------------------------------------------------ | |
1 3 HTTP/krba01.incept.lab@INCEPT.LAB | |
2 3 service_krba01@INCEPT.LAB | |
(2) | |
-bash-3.2$ klist -k –t krba01.keytab | |
KVNO Timestamp Principal | |
---- ---------------- ----------------------------------------------------------- | |
3 05/12/2013 15:25 HTTP/krba01.incept.lab@INCEPT.LAB | |
3 05/12/2013 15:25 service_krba01@INCEPT.LAB | |
(3) | |
To get encryption type of keys | |
-bash-3.2$ klist -k -e –t krba01.keytab | |
Keytab name: FILE:krba01.keytab | |
KVNO Principal | |
---- --------------------------------------------------------------------------------- | |
3 HTTP/krba01.incept.lab@INCEPT.LAB (ArcFour with HMAC/md5) | |
3 service_krba01@INCEPT.LAB (ArcFour with HMAC/md5) | |
(4) | |
Alternatively you can also use Klist or Ktab utility that comes with standard java. | |
C:\>java sun.security.krb5.internal.tools.Klist -k -t krba01.keytab | |
Key tab: krba01.keytab, 2 entries found. | |
[1] Service principal: HTTP/krba01.incept.lab@INCEPT.LAB | |
KVNO: 3 | |
Time stamp: Dec 05, 2013 15:25 | |
[2] Service principal: service_krba01@INCEPT.LAB | |
KVNO: 3 | |
Time stamp: Dec 05, 2013 15:25 | |
C:\>java sun.security.krb5.internal.tools.Ktab -l -e -t -k krba01.keytab | |
Keytab name: krba01.keytab | |
KVNO Timestamp Principal | |
---- --------------- --------------------------------------------------------------------------- | |
3 12/5/13 3:25 PM HTTP/krba01.incept.lab@INCEPT.LAB (23:RC4 with HMAC) | |
3 12/5/13 3:25 PM service_krba01@INCEPT.LAB (23:RC4 with HMAC) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment