Ga naar hoofdinhoud
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.

Dell Chassis Management Controller Version 1.3 for PowerEdge FX2/FX2s User's Guide

Generating Kerberos keytab file

To support the SSO and smart card login authentication, CMC supports Windows Kerberos network. The ktpass tool is used to create the Service Principal Name (SPN) bindings to a user account and export the trust information into a MIT-style Kerberos keytab file. For more information about the ktpass utility, see the Microsoft website.

Before generating a keytab file, create an Active Directory user account for use with the -mapuser option of the ktpass command. Use the same name as the CMC DNS name to which you upload the generated keytab file.

To generate a keytab file using the ktpass tool:

  1. Run the ktpass utility on the domain controller (Active Directory server), where you want to map CMC to a user account in Active Directory.
  2. Use the following ktpass command to create the Kerberos keytab file:
    C:\>ktpass -princ HTTP/cmcname.domain_name.com@REALM_NAME.COM - mapuser dracname -mapOp set -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL
                                        -pass * -out c:\krbkeytab
                                     
    • NOTE: The cmcname.domainname.com must be in lowercase as required by RFC and the @REALM_NAME must be in uppercase. In addition, CMC supports the DES-CBC-MD5 and AES256-SHA1 types of cryptography for Kerberos authentication.

    A keytab file is generated that must be uploaded to CMC.

    • NOTE: The keytab contains an encryption key and must be kept secure. For more information about the ktpass utility, see the Microsoft website.

Beoordeel deze inhoud

Nauwkeurig
Nuttig
Eenvoudig te begrijpen
Was dit artikel nuttig?
0/3000 characters
  Geef een beoordeling (1-5 sterren).
  Geef een beoordeling (1-5 sterren).
  Geef een beoordeling (1-5 sterren).
  Selecteer of het artikel nuttig is of niet.
  Opmerkingen mogen geen speciale tekens bevatten: <>() \