Re: kadm5.acl "e" permission

"Greg Hudson" <[email protected]> Fri, 7 Feb 2025 11:07:05 -0500
Newsgroups gmane.comp.encryption.kerberos.general
Message-ID <[email protected]>
On 2/7/25 08:58, Stefan Kania wrote:
> in the kadm5.acl the "*" or the "x" gives all permission but not the 
> permission to extract the principal keys for this it the "e" permission. 
> Can some please explain to me how can I extract the principal key if I 
> have the "e" permission. I can't find anything that explain how to do it.

The kadmin "ktadd -norandkey" command will extract principal keys to a 
keytab file without generating new keys as it normally does.

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos