topic Re: Import kerberos keytab from CLI? in General Topics

Import kerberos keytab from CLI?

andrew.hho — Wed, 27 Jun 2018 03:59:40 GMT

Hi,

Is it possible to import the kerberos keytab file directly from CLI rather than using the GUI?

I have noticed that if the keytab is imported via GUI, the command below is added to the config.

set shared authentication-profile my_profile single-sign-on kerberos-keytab **** (actual value removed)

But if I want to use this command directly on CLI (for the reason of automation), how do I obtain/convert the **** from the actual keytab file?

Regards,

Andrew

kiwi — Wed, 27 Jun 2018 08:18:31 GMT

The CLI command is exactly as you saw in the config and needs to be executed in config mode :

admin@PA-200> configure
admin@PA-200# set shared authentication-profile <name> single-sign-on kerberos-keytab <value>

and don't forget to commit ^_^

Cheers !

-Kiwi.

andrew.hho — Wed, 27 Jun 2018 09:15:24 GMT

Hi Kiwi,

Thanks for the reply. My question is what is the <value> to use? How do I obtain the <value> from the actual keytab file?

Regards,

Andrew

kiwi — Wed, 27 Jun 2018 09:56:50 GMT

The mentioned CLI command actually allows you to select keytabs which you already imported through the GUI.

I've been looking for the command to import the actual keytab file using CLI but am unable to find it with the "find command".

Unless I'm missing something it doesn't currently seem to be an option ... feature request ?

Cheers !

-Kiwi.