Import kerberos keytab from CLI?

[andrew.hho]

Hi,

Is it possible to import the kerberos keytab file directly from CLI rather than using the GUI? 

I have noticed that if the keytab is imported via GUI, the command below is added to the config.

set shared authentication-profile my_profile single-sign-on kerberos-keytab **** (actual value removed)  

But if I want to use this command directly on CLI (for the reason of automation), how do I obtain/convert the **** from the actual keytab file?

Regards,

Andrew

[kiwi]

Hi @andrew.hho,

The CLI command is exactly as you saw in the config and needs to be executed in config mode :

admin@PA-200> configure
admin@PA-200# set shared authentication-profile <name> single-sign-on kerberos-keytab <value>

and don't forget to commit ^_^

Cheers !

-Kiwi.

[andrew.hho]

Hi Kiwi,

Thanks for the reply. My question is what is the <value> to use? How do I obtain the <value> from the actual keytab file?  

Regards,

Andrew

[kiwi]

Hi @andrew.hho,

The mentioned CLI command actually allows you to select keytabs which you already imported through the GUI.

I've been looking for the command to import the actual keytab file using CLI but am unable to find it with the "find command".

Unless I'm missing something it doesn't currently seem to be an option ... feature request ?

Cheers !

-Kiwi.