You are on page 1of 4

Keytab configuration on tlvapaprd01 and tlvapaprd02

I have followed the below link instruction and has successfully completed 8 steps

https://www.extranice.com/ProductDocumentation/APA74/#../Subsystems/Site_Prep/content/
_serverinstall/topics/creating%20an%20active%20directory%20user%20account%20and
%20keytab.htm?

First create two users in AD

1. Apaadmintest
2. Adminapa

Set

1. User cannot change password


2. Account never expires

Then run below command.

Keytab file location is: C:\Temp on tlvinf02 DC


When I run this command, the following happens:

The user logon name of the Active Directory account is changed to:

HTTP/HOSTNAME.DOMAIN.COM@DOMAIN

The SPN (Service Principle Name) for this account is set to:

HTTP/HOSTNAME.DOMAIN.COM

The file HOSTNAME.DOMAIN.COM.HTTP.KEYTAB is created which is the keytab file that can be copied to

another computer and used to authenticate against this account. The keytab file is stored in AM.
Then run
klist.exe -e -k -t "<path to keytab file>"

Then run

setspn -l command

Then run

setspn -q command

Then run

setspn -l command
Lastly, I have save Keytab file on below location
D:\nice_systems\RTServer\openam of both servers.

You might also like