Discussion:
kadm5.acl "e" permission
Add Reply
Stefan Kania
2025-02-07 13:58:25 UTC
Reply
Permalink
Hello,

in the kadm5.acl the "*" or the "x" gives all permission but not the
permission to extract the principal keys for this it the "e" permission.
Can some please explain to me how can I extract the principal key if I
have the "e" permission. I can't find anything that explain how to do it.

Thank you

Stefan
Greg Hudson
2025-02-07 16:07:05 UTC
Reply
Permalink
Post by Stefan Kania
in the kadm5.acl the "*" or the "x" gives all permission but not the
permission to extract the principal keys for this it the "e" permission.
Can some please explain to me how can I extract the principal key if I
have the "e" permission. I can't find anything that explain how to do it.
The kadmin "ktadd -norandkey" command will extract principal keys to a
keytab file without generating new keys as it normally does.
Stefan Kania
2025-02-07 18:07:15 UTC
Reply
Permalink
Post by Greg Hudson
Post by Stefan Kania
in the kadm5.acl the "*" or the "x" gives all permission but not the
permission to extract the principal keys for this it the "e"
permission. Can some please explain to me how can I extract the
principal key if I have the "e" permission. I can't find anything that
explain how to do it.
The kadmin "ktadd -norandkey" command will extract principal keys to a
keytab file without generating new keys as it normally does.
Thank you, that was exactly what I was looking for :-)

Loading...