Difference Between ktutil and kadmin: Why You Can’t Create Kerberos Principals with ktutil

[#1]

Hi All,

I have problem with kerberbos util command (ktutil), on client machine i created a new principal with add_entry and it's work fine but when i try to init ticket with kinit it's failed with message : "principal don't existe on kerberos database".

when i create principal with kadmin.local on krb-server and try to init ticket on client it's work.

any suggestion pleasee ??

Thanks for your help.

Best Regards suggestion

[#2 · Accepted solution]

@badr bakkou

the ktutil utility is used to create keytab files only. It cannot create new principals in the KDC. If you want to add new principals to the KDC, you need to use kadmin or kdamin.local. Both of which can be used to create keytab files as well.

[#3]

OK thanks for your explanation.