Doubts regarding Keytab file

2017-05-09 Thread Abhishek Kaushik
Hello, I am trying to understand how Kerberos works and so came across this file called Keytab which, I believe, is used for authentication to the KDC server. Just like every user and service(say Hadoop) in a kerberos realm has a service principal, does every user and service have a keytab file?

Re: Doubts regarding Keytab file

2017-05-09 Thread Benjamin Kaduk
On Tue, May 09, 2017 at 01:02:08PM +0530, Abhishek Kaushik wrote: > Hello, > > I am trying to understand how Kerberos works and so came across this file > called Keytab which, I believe, is used for authentication to the KDC > server. > > Just like every user and service(say Hadoop) in a kerberos

Re: Doubts regarding Keytab file

2017-05-09 Thread Benjamin Kaduk
On Wed, May 10, 2017 at 12:20:44AM +0530, Abhishek Kaushik wrote: > Thank you for replying. > > I understood that it is a symmetric key which is shared with the KDC. > So, is it in binary format or is there some other format which is used, > generally? The keytab file format is documented at http

Re: Doubts regarding Keytab file

2017-05-09 Thread Abhishek Kaushik
Thank you for replying. I understood that it is a symmetric key which is shared with the KDC. So, is it in binary format or is there some other format which is used, generally? And what if(hypothetically) you don't have a password for some user, how is the key generated in such a case? Like you ha