Kerberos keytab part-3

Once you have your service account details, generating the keytab is done on a Windows machine using ktpass. The keytab file contains the encrypted credentials that your service will use to authenticate without an interactive password prompt. Keep this file secure — it’s essentially a password file.

Generating keytab

Generating keytab using the below information

Domain Name : dummydomain

Service Account Name : myserviceaccount

Service Account Password : afk1K2##$#dlkajsf

• On Windows Machine

$ ktpass -princ HTTP:/local-test-environment.domain \
-mapuser dummydomain\myserviceaccount \
-crypto ALL \
-ptype KRB5_NT_PRINCIPAL \
-pass afk1K2##$#dlkajsf \
-out ~\account.keytab

you can remove ‘' and make this command single-line as well