Chapter 4: Configuring the Library
Working With LDAP User Accounts (Remote Authentication)
92 Quantum Scalar i40 and Scalar i80 User’s Guide
5 At the command prompt, map SPN to the computer account. Use
the following format:
setspn -A library/<fqdn of library> <computer
account>
For example:
setspn -A library/delos.dvt.mycompany.com
kerbtest
6 At the command prompt, create the keytab file for the SPN. Use one
of the following formats:
• For Windows 2003:
ktpass -out library.keytab -princ
library/<fqdn of library>@<realm>
+rndPass -ptype KRB5_NT_SRV_HST -crypto RC4-
HMAC-NT -mapUser <realm>/computers/<computer
account>
For example:
ktpass -out library.keytab -princ library/
+rndPass -ptype KRB5_NT_SRV_HST -crypto RC4-
HMAC-NT -mapUser ourrealm.local/computers/
kerbtest
• For Windows 2008:
ktpass -out library.keytab -princ library/
<fqdn of library>@<realm>
+rndPass -ptype KRB5_NT_SRV_HST -crypto
AES256-SHA1
-mapUser <realm>/computers/<computer account>
For example:
ktpass -out library.keytab -princ library/
+rndPass -ptype KRB5_NT_SRV_HST -crypto
AES256-SHA1
-mapUser ourrealm.local/computers/kerbtest
Komentarze do niniejszej Instrukcji