[Freeipa-devel] LDAP binds, service principals, etc.

Karl MacMillan kmacmill at redhat.com
Fri Oct 26 21:30:08 UTC 2007


On Fri, 2007-10-26 at 17:21 -0400, John Dennis wrote:
> John Dennis wrote:
> > we don't currently have a mechanism in IPA to generate 
> > keytab's yet, right?
> 
> Well, I should have said, generalized mechanims, we do have the 
> following functions:
> 
> __create_http_keytab(), __create_ds_keytab(), 
> __export_kadmin_changepw_keytab()
> 
> which can be cut-n-paste duplicated to generate a keytab, but I thought 
> I recalled Karl was working on a general mechanism, is that right?

Yes - we're working on the mechanism right now, but it will be a few
days at least. You should just generate by hand using kadmin.local for
testing.

Karl




More information about the Freeipa-devel mailing list