Never mind -- if I use ipa-getkeytab, it works perfectly.

What is the difference between what getkeytab and ktutil by hand does? Is it documented?


On 6/5/17 9:18 AM, Kat wrote:
Ok, I guess I am not understanding something here. What am I missing? The PW is correct, but no matter what I do, I can't use the keytab file for a user as shown below:

[root@ipa ~]# ktutil
ktutil: addent -password -p -k 1 -e aes256-cts-hmac-sha1-96
Password for
ktutil:  wkt /root/cyberj.keytab
ktutil:  q

[root@ipa ~]# kinit -k -t cyberj.keytab
kinit: Password incorrect while getting initial credentials



FreeIPA-users mailing list --
To unsubscribe send an email to

Reply via email to