# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1. # often than the period, and less often if the KDC is not used Setup your /etc/krb5/nf with your domain controllers > ktpass -princ -mapuser DOMAINhost-fs0 -crypto All -pass -ptype KRB5_NT_PRINCIPAL -out fs0.keytabĬopy the fs0.keytab file to your Solaris server and place it in the /etc/krb5 directory as krb5.keytab cp fs0.keytab /etc/krb5/krb5.keytab Once the command prompt opens use the following command to generate a keytab file. Next, on the domain controller click Start → All Programs → Accessories and then right click on the command prompt and choose run as Administrator (specific to 2008 servers). The account should need no special privileges and is just a normal user account. For this example I created a user account named “host-fs0” and set it so that the user cannot change the password and the password never expires. To begin, create an active directory user account that we will use to create kerberos tickets (It may also be possible to just use a normal user account but I haven’t tested what happens when the account is deleted). This is strange as this is normally all handled in Samba. NEW WEIRDNESS – Not sure why but as of Solaris 11 I needed to manually create a key tab file from my domain controller otherwise I was getting kerberos errors.
