Search code examples
bashpasswordspipekerberoskeytab

Script Kerberos Ktutil to make keytabs


I want to make a script that will generate the a keytab using ktutil. When running the script I want to use [user]$ script.sh PASSWORD

#script.sh
echo "addent -password -p PRINCIPAL -k 1 -e aes256-cts-hmac-sha1-96" | ktutil

Ktutil than needs a password, here I want to use the PASSWORD argument from above. How would I pass the password arguement?


Solution

  • With GNU bash:

    user="PRINCIPAL"
    pass="topsecret"
    
    printf "%b" "addent -password -p $user -k 1 -e aes256-cts-hmac-sha1-96\n$pass\nwrite_kt $user.keytab" | ktutil
    
    printf "%b" "read_kt $user.keytab\nlist" | ktutil
    

    Output:

    slot KVNO Principal
    ---- ---- ---------------------------------------------------------------------
       1    1                          PRINCIPAL@YOURDOMAIN