Re: Usage of the machine account for ldapsearch

Stefan Kania via samba <[email protected]>
Newsgroups gmane.network.samba.general
Organization Stefan Kania
Message-ID <[email protected]>
Hi Matthias,

first you need to create a keytab for your principal with:

samba-tool domain exportkeytab [email protected] /path/for/keytab/youraccount.keytab

Then, if you want to use the keytab for authentication with the ldap-tools do

kinit -k -t /path/for/keytab/youraccount.keytab youraccount

create a ldap.conf with the right URI and BASE then do a

ldapsearch

without any arguments this should list all the Objects youraccount has prmission to see.



Am 04.02.26 um 07:45 schrieb Matthias Kühne | Ellerhold Aktiengesellschaft via samba:
> I can run kinit '[email protected]' and it prompts me for a
> PW. There must be a keytab somewhere on this server that I can use, right?

Matrix: @stkania:matrix.org
---------------------

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
OpenPGP_signature.asc (application/pgp-signature, 236 B)
-----BEGIN PGP SIGNATURE-----

wnsEABYIACMWIQRsT9azWR5AolaZQIFS9tTdG7aKtQUCaYMw1gUDAAAAAAAKCRBS9tTdG7aKtRxu
AQDgRkfVphE81Z2E5xvAIHhsB0oLJHgVSotG129ya8xZzQEA/9t8gliRPDRHWgEoVjoVP5ZdARKF
Rz0YHsup6EOcfQQ=
=2l7k
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.