I was looking for answer to above question on different web sites but in the every case there was how to generate keytab file. I need keytab to get hbase connection which contains kerberos authentication.
What is needed to generate kerberos keytab file on windows?
17.2k Views Asked by Michal Kowalczyk At
1
There are 1 best solutions below
Related Questions in WINDOWS
- Get Maximum Log Size
- Debugging Windows Services while starting
- Possible consequences of duplicate ProgId for different classes
- How to chain BCryptEncrypt and BCryptDecrypt calls using AES in GCM mode?
- mingw-64 conflicting declarations when cross-compiling
- I run an EXE program from a Windows Service but I can't see form C#?
- Why is PowerShell "not recognized" when installing Chocolatey?
- How to check if Windows device is phone or tablet/pc?
- How to add directories to Cygwin gcc default search path
- Can't install anything with pip2 on Windows 7 due to UnicodeDecodeError
- Active directory and linux nslcd binding without extending the AD schema
- How To Prevent Over Scrolling in Scroll Viewer Windows Phone 8.1
- Unicode error from pip install
- Where is the 'EnablePinning' property in the ribbon framework's recent items?
- How can I implement the same models and data across ASP.NET and Windows Apps
Related Questions in HBASE
- HBase table is empty, but regions are increased
- I am using Hbase 1.0.0 and Apache phoenix 4.3.0 on CDH5.4. When I restart Hbase regionserver is down
- phoenix join operation not working with hbase
- Running HBase in standalone mode but get hadoop "retrying connect to server" message?
- How to start HBase master using Java code in ubuntu
- Spark and HBase Snapshots
- Connect to hbase from remote machine
- Read Data from HBase running on EMR Cluster with Spark installed on local machine
- Unable to connect to HBase stand alone server from windows remote client
- Error while installing HBase on windows
- Importtsv command does not work in Hbase1.0.1.1
- LongComparator does not work in Google Cloud Bigtable with HBase API
- How do you calculate the size of a single row in hbase?
- HBase AggregationClient in HDInsight
- why use protocol buffers in java
Related Questions in KERBEROS
- Windows client damage authorization header (Kerberos) => IIS 400 (Bad Request)
- Configure Kerberos auth for TFS 2013
- Single Sign-On in Windows Applications using AD login
- C# RestSharp library and Kerberos authentication
- Hiveserver2 Kerberos
- Passing Kerberos ticket as parameter in SOAP web service call
- Spring security kerberos validate token error
- Hadoop Kerberos security
- Authenticate scripts on HDFS using key.tab file
- Making my own Kerberos Authentication Ticket
- Using Java 8 S4U2Proxy - A good example needed
- Connect to HBase using tunnel
- Hive Server2 ACID transactions not working
- How to specify the TGT kerberos ticket cache in beeline
- Java GSSAPI Credentials with Active Directory
Related Questions in KEYTAB
- Authenticate scripts on HDFS using key.tab file
- SPNEGO/Kerberos in IIS with foreign domain keytab
- How to initialize a keytab in docker?
- Kerberos and multiple SPNs
- Can I distribute docker image with pregenerated keytab file?
- Is the ktpass command disable password authentication
- Configuring Tomcat 6 with multiple SPNs
- Python Code Connecting to Hadoop Hive Kerberos Keytab through watson studio
- Jsch connection with Kerberos
- Implementing a Keytab File on Windows Server
- Can contents of Keytab file be stored and used from Azure Key vault?
- Kerberos - keytab file only works with certain password
- Can a keytab file be generated for more than one application on the same domain?
- Keytab file authentication check
- Kerberos auto update for "renew until"
Related Questions in KTPASS
- Kerberos and multiple SPNs
- Is the ktpass command disable password authentication
- Implementing a Keytab File on Windows Server
- Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known
- Can I verify the password in a keytab file?
- kerberos authentication- functional group
- Purpose of mapuser in ktpass
- Kerberos keytab file contains multiple entries
- Kerberos - AES-256 Keytab does not work
- Storage of SALT in Active Directory / Configure SSO for SAP HANA
- Kerberos keytab file generation error: "Failed to set property 'servicePrincipalName' / Warning: Unable to set SPN mapping data"
- Creating a keytab to use with kinit in Windows
- Password parameter with special characters
- What is needed to generate kerberos keytab file on windows?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
In order to generate a keytab on Windows, you need to be running some version of Kerberos which talks back to a Directory server. On Windows, by far the most prevalent example of this is Active Directory, which has Kerberos support built-in. You'll need to create the keytab on a Windows server joined to the Active Directory domain, using the ktpass command to actually create the keytab.
Keytab generation syntax example:
The above command example successfully creats a keytab for use in an AD domain named DEV.LOCAL. Note: notice the use of the randomize password syntax (+rndPass). In my opinion, there is no need to specify a password in the keytab creation command syntax. Instead, it's better to allow the password to be randomized - that provides much better security since it prevents anyone from being able to manually logon as the AD account surreptitiously and bypass the keytab.
For additional reference, I highly suggest you read my article on Kerberos keytab creation on the Windows platform on Microsoft Technet which greatly expands on what I said here: Kerberos Keytabs – Explained. I frequently go back and edit it based on questions I see here in this forum.