Guest User

Untitled

a guest
Jul 25th, 2018
148
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.82 KB | None | 0 0
  1. [root@kdc.example.com ~]# kadmin.local -q 'get_principal myuser@EXAMPLE.COM'
  2. Authenticating as principal root/admin@EXAMPLE.COM with password.
  3. Principal: myuser@EXAMPLE.COM
  4. Expiration date: [never]
  5. Last password change: Mon Jul 16 06:54:59 CDT 2018
  6. Password expiration date: Tue Jul 23 06:54:59 CDT 2019
  7. Maximum ticket life: 1 day 00:00:00
  8. Maximum renewable life: 7 days 00:00:00
  9. Last modified: Mon Jul 16 06:54:59 CDT 2018 (kadmind@EXAMPLE.COM)
  10. Last successful authentication: Mon Jul 23 11:03:38 CDT 2018
  11. Last failed authentication: Mon Jul 23 14:40:57 CDT 2018
  12. Failed password attempts: 1
  13. Number of keys: 2
  14. Key: vno 3, aes256-cts-hmac-sha1-96:special
  15. Key: vno 3, aes128-cts-hmac-sha1-96:special
  16. MKey: vno 1
  17. Attributes: REQUIRES_PRE_AUTH
  18. Policy: [none]
  19.  
  20. myuser@client-host.example.com$ cd /home/myuser
  21. myuser@client-host.example.com$ mkdir .krb5
  22. myuser@client-host.example.com$ chmod 700 .krb5
  23. myuser@client-host.example.com$ cd /home/myuser/.krb5
  24. myuser@client-host.example.com$ ktutil
  25. ktutil: addent -password -p myuser@EXAMPLE.COM -k 3 -e aes256-cts
  26. Password for myuser@EXAMPLE.COM:
  27. ktutil: list
  28. slot KVNO Principal
  29. ---- ---- ---------------------------------------------------------------------
  30. 1 1 myuser@EXAMPLE.COM
  31. ktutil: wkt myuser.keytab
  32. ktutil: exit
  33.  
  34. myuser@client-host.example.com$ klist -kte myuser.keytab
  35. Keytab name: FILE:myuser.keytab
  36. KVNO Timestamp Principal
  37. ---- ------------------- ------------------------------------------------------
  38. 1 07/23/2018 14:33:30 myuser@EXAMPLE.COM (aes256-cts-hmac-sha1-96)
  39.  
  40. myuser@client-host.example.com$ klist
  41. klist: Credentials cache keyring 'persistent:4866486744:krb_ccache_rGHfj38' not found
  42. myuser@client-host.example.com$ kinit myuser@EXAMPLE.COM -k -t /home/myuser/.krb5/myuser.keytab
  43. kinit: Password incorrect while getting initial credentials
Add Comment
Please, Sign In to add comment