kadm5.acl "e" permission

[Stefan Kania]

Am 07.02.25 um 17:07 schrieb Greg Hudson:
> On 2/7/25 08:58, Stefan Kania wrote:
>> in the kadm5.acl the "*" or the "x" gives all permission but not the 
>> permission to extract the principal keys for this it the "e" 
>> permission. Can some please explain to me how can I extract the 
>> principal key if I have the "e" permission. I can't find anything that 
>> explain how to do it.
> 
> The kadmin "ktadd -norandkey" command will extract principal keys to a 
> keytab file without generating new keys as it normally does.
> 
Thank you, that was exactly what I was looking for :-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.mit.edu.ezproxyberklee.flo.org/pipermail/kerberos/attachments/20250207/62d5147b/attachment.sig>