Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| 72:setup_directory [2020/03/04 11:36] – [Setup Active Directory] twn | 72:setup_directory [2020/03/04 11:41] – [To use a more secure encryption for the keytab file] twn | ||
|---|---|---|---|
| Line 18: | Line 18: | ||
| Now you have to securely transfer the keytab file to the Stages server. | Now you have to securely transfer the keytab file to the Stages server. | ||
| - | ==== Enable delegation | + | === Enable delegation === |
| After exporting the keytab file, delegation has to be enabled on the trust account. Be aware that this can only be done after exporting the Kerberos key! Windows will not display this option, unless you have exported the key first. Select your trust account with the right mouse button and choose “Properties” from the context menu, click on the “Delegation” tab and check “Trust this user for delegation to any service (Kerberos only)”. | After exporting the keytab file, delegation has to be enabled on the trust account. Be aware that this can only be done after exporting the Kerberos key! Windows will not display this option, unless you have exported the key first. Select your trust account with the right mouse button and choose “Properties” from the context menu, click on the “Delegation” tab and check “Trust this user for delegation to any service (Kerberos only)”. | ||
| - | ==== To use a more secure encryption for the keytab file ==== | + | |
| + | === To use a more secure encryption for the keytab file === | ||
| Execute the ktpass command as above but with e.g. -crypto AES256-SHA1.\\ | Execute the ktpass command as above but with e.g. -crypto AES256-SHA1.\\ | ||