Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

error when running ktpass on W2K8

1,944 views
Skip to first unread message

Miaveta , Emilia (emhr)

unread,
Jan 28, 2014, 8:30:12 AM1/28/14
to Kerb...@mit.edu
Hi,

I'm trying to generate a keytab file, but the command is not running successfully, and the process is not being completed, as shown below:

C:\Windows\system32>ktpass /out xxxspnaccount.keytab /princ HTTP/test.mydomain.c
o...@DOMAIN.MYDOMAIN.COM /pass * /mapuser xxx2spn...@DOMAIN.MYDOMAIN.COM /ptype
KRB5_NT_PRINCIPAL /crypto All
Targeting domain controller: DOMAINCONTROLER.domain.mydomain.com
Successfully mapped HTTP/test.mydomain.com to xxx2spnaccount.
Type the password for HTTP/caps.angolalng.com:
Type the password again to confirm:
Password set failed! 0x00000035
Aborted.

I'm using the right password when prompted,
My account have permissions,

Please help me on that.

Thanks,
Emilia

Richard E. Silverman

unread,
Jan 29, 2014, 6:41:38 PM1/29/14
to
I avoid using ktpass.exe if at all possible, since I've found it to be a
vexing and bizarre program. Normally I just use ktutil or similar to
create a keytab using the account's current password, if I have it.

It appears here, though, that you're trying to set the account password
to be "*". Perhaps that violates the domain's password complexity
requirements, and is being rejected?

--
Richard
0 new messages