Project

General

Profile

Bug #38791

Correct the example for generating a keytab in Guide

Added by Andrew Walker 9 months ago. Updated 9 months ago.

Status:
Done
Priority:
No priority
Assignee:
Timothy Moore II
Category:
Documentation
Target version:
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

Correct syntax for generating a keytab in Windows:

ktpass.exe /out freenas.keytab /princ http/serviceaccount@BALEBDREW.FUN /mapuser serviceaccount /ptype KRB5_NT_PRINCIPAL /crypto ALL /pass pa$$w0rd

Steps to do this:

In the above example:
freenas.keytab = the file to upload to the freenas server
serviceaccount = the name of the service account for the TrueNAS | FreeNAS server generated in AD Users and Computers
BALEBDREW.FUN = the name of the AD domain
pa$$w0rd = something hopefully better than this password.

In theory, perhaps example should have a disclaimer to select an appropriate Cryptosystem:

[- /]       crypto : DES-CBC-CRC : for compatibility
[- /]       crypto : DES-CBC-MD5 : for compatibility
[- /]       crypto : RC4-HMAC-NT : default 128-bit encryption
[- /]       crypto : AES256-SHA1 : AES256-CTS-HMAC-SHA1-96
[- /]       crypto : AES128-SHA1 : AES128-CTS-HMAC-SHA1-96
[- /]       crypto :        All : All supported types

History

#1 Updated by Dru Lavigne 9 months ago

  • Target version changed from Backlog to 11.2-BETA2

#2 Updated by Dru Lavigne 9 months ago

  • Status changed from Unscreened to Not Started

#3 Updated by Timothy Moore II 9 months ago

  • Status changed from Not Started to In Progress
  • Assignee changed from Warren Block to Timothy Moore II

#4 Updated by Timothy Moore II 9 months ago

  • Target version changed from 11.2-BETA2 to 11.2-BETA3
  • Needs QA changed from Yes to No
  • Needs Doc changed from Yes to No

#5 Updated by Dru Lavigne 9 months ago

  • Subject changed from documentation for generating a keytab is incorrect to Correct the example for generating a keytab in Guide
  • Status changed from In Progress to Done
  • Target version changed from 11.2-BETA3 to 11.2-BETA2
  • Needs Merging changed from Yes to No

Also available in: Atom PDF