Setting up host principal in KDC

vemurikarthik — Thu, 16 Jan 2020 15:13:15 GMT

Hi All,

I was trying to add a host principal in KDC (below is the SAS link I am following) and the command doesn't seem to recognize "ok_to_delegate". I have less knowledge in kerberos mechanism. Could you advise if ok_as_delegate can be used instead?

https://documentation.sas.com/?docsetId=hpaicg&docsetTarget=n02024sashpanalytics0install.htm&docsetVersion=3.9&locale=en#n02029sashpanalytics0install

[root@xxxxx~]# kadmin -q "addprinc –randkey +ok_to_delegate host/xxxxx.ic.xxxx.net"
Authenticating as principal root/admin@karthikhdp.IC.xxxx.NET with password.
Password for root/admin@karthikhdp.IC.xxxx.NET:
usage: add_principal [options] principal
options are:
[-randkey|-nokey] [-x db_princ_args]* [-expire expdate] [-pwexpire pwexpdate] [-maxlife maxtixlife]
[-kvno kvno] [-policy policy] [-clearpolicy]
[-pw password] [-maxrenewlife maxrenewlife]
[-e keysaltlist]
[{+|-}attribute]
attributes are:
allow_postdated allow_forwardable allow_tgs_req allow_renewable
allow_proxiable allow_dup_skey allow_tix requires_preauth
requires_hwauth needchange allow_svr password_changing_service
ok_as_delegate ok_to_auth_as_delegate no_auth_data_required
lockdown_keys

where,
[-x db_princ_args]* - any number of database specific arguments.
Look at each database documentation for supported arguments

Re: Setting up host principal in KDC

AnandVyas — Fri, 17 Jan 2020 02:30:39 GMT

I think it should be ok_as_delegate. Here the link to list of commands - https://web.mit.edu/kerberos/krb5-1.12/doc/admin/admin_commands/kadmin_local.html

topic Setting up host principal in KDC in Administration and Deployment

Setting up host principal in KDC

Re: Setting up host principal in KDC