‎Kerberos at Celerra | DELL Technologies

Start a Conversation

UNSOLVED

Alexbr1

updated

16 years ago

Alexbr1

6 Posts

0

734

January 24th, 2011 01:00

Kerberos at Celerra

Hi,

I am trying to extract kerberos keys from Celerra.

Accordingly to the manual I should run: server_kerberos All -keytab.

This command should bring me that data , but it's not.

Does anybody knows how should I proceed?

Thanks, Alex

R
Rainer_EMC
6 Operator
•
8645 Posts
382
0
Posted January 24th, 2011 11:00
Did you try server_2 instead of all ?
B
bergec
275 Posts
382
0
Posted January 25th, 2011 00:00
What exactly are you looking for? The -keytab option will list the principal names for the keys

]$ server_kerberos server_2 -keytab | more
server_2 :

keytab file major version = 0, minor version 0

-- Entry number 1 --
principal: CIFS-NS120F-A-2$@DEMOCENTERFR.EMC.COM
realm: DEMOCENTERFR.EMC.COM
encryption type: rc4-hmac-md5
principal type 1, key version: 2

Claude
B
bergec
275 Posts
382
0
Posted January 25th, 2011 00:00
I do not think you can do that with the server_kerberos command. Maybe you can use ktpass for the Microsoft Support Tools to generate a key for the CIFS server if you then need to import it

Claude
A
Alexbr1
6 Posts
382
0
Posted January 25th, 2011 00:00
Yes, I've tried.

I got the same answer
A
Alexbr1
6 Posts
382
0
Posted January 25th, 2011 00:00
I am looking for the keys itself. I need them to read the traffic in the network.

Accordingly to the manual I should get them using this command:

keytab file major version = 5, minor version 2

principal: nfs/lngbe245@example.com

realm: example.com

encryption type: des-cbc-crc

principal type 1, key version: 2

key length: 8, key: e3a4570dbfb94ce5
A
Alexbr1
6 Posts
382
0
Posted January 25th, 2011 03:00
That's the point - my limitation is that I can't change the keys.

I need somehow to extract them from Celerra