summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorChetan Risbud <crisbud@redhat.com>2013-11-27 17:14:35 +0530
committerLuis Pabon <lpabon@redhat.com>2013-12-04 13:09:44 -0800
commit2f9e3120bbd7ef6b7459fccb5b740b6542b13c57 (patch)
treefcf5040d363d7cdf9bd8dafcd054d883445cb375 /doc
parent5405fd7927ef68015c25632951a94bcddb60c33d (diff)
Additional Parameters to create keytab file
Minor changes to explicitly set keyversion number as 0 and encryption method while creating keytab file on Windows AD server. This has been noticed on different windows 2008 server that they set different kvno by default. So just making sure it to be 0 as expected by mod_auth_kerb. Bug: N/A Change-Id: Ic114e4964745abfe97fbfcd575b5205bd6aaf171 Signed-off-by: Chetan Risbud <crisbud@redhat.com> Reviewed-on: http://review.gluster.org/6370 Reviewed-by: Prashanth Pai <ppai@redhat.com> Tested-by: Prashanth Pai <ppai@redhat.com> Reviewed-by: Luis Pabon <lpabon@redhat.com>
Diffstat (limited to 'doc')
-rw-r--r--doc/swiftkerbauth_guide.md3
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/swiftkerbauth_guide.md b/doc/swiftkerbauth_guide.md
index 144bf59..e18c7ef 100644
--- a/doc/swiftkerbauth_guide.md
+++ b/doc/swiftkerbauth_guide.md
@@ -48,7 +48,8 @@ Copy keytab file to client:
Add a HTTP Kerberos service principal:
> c:\>ktpass.exe -princ HTTP/fcclient.winad.com@WINAD.COM -mapuser
-> auth_admin@WINAD.COM -pass Redhat*123 -out c:\HTTP.keytab
+> auth_admin@WINAD.COM -pass Redhat*123 -out c:\HTTP.keytab -crypto DES-CBC-CRC
+> -kvno 0
Use winscp to copy HTTP.ketab file to /etc/httpd/conf/http.keytab