Comments on: UAC and ktpass.exe http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/ The weblog of an IT pro specializing in virtualization, storage, and servers Tue, 07 Feb 2012 13:34:34 +0000 hourly 1 http://wordpress.org/?v= By: Richard http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-51230 Richard Tue, 26 Jul 2011 10:40:04 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-51230 I'm trying to set up interoperability and have been using KTPASS with user names of the format User@REALM.NAME rather than REALM\User$. I'm getting "Service key not available" on my server. Does this syntax effect things? Thanks - Richard I’m trying to set up interoperability and have been using KTPASS with user names of the format User@REALM.NAME rather than REALM\User$. I’m getting “Service key not available” on my server.

Does this syntax effect things?

Thanks
– Richard

]]> By: Oliver http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-48772 Oliver Sat, 03 Jul 2010 00:52:23 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-48772 Scott- Thanks for the tip... that has moved my RHEL5.5 box one step closer to joining the AD domain. After copying the keytab file over from my DC when I try a -> kinit user@domain.com I receive an error of: kinit(v5): Cannot resolve network address for KDC in realm veracyte.com while getting initial credentials when I restart smb in /var/log/messages I see the following Jul 2 17:46:26 simi winbindd[7143]: [2010/07/02 17:46:26, 0] libads/kerberos.c:ads_kinit_password(228) Jul 2 17:46:26 simi winbindd[7143]: kerberos_kinit_password SIMI$@VERACYTE.LAN failed: Preauthentication failed any ideas what coul be happening here? Thanks in adv Oliver Scott- Thanks for the tip… that has moved my RHEL5.5 box one step closer to joining the AD domain. After copying the keytab file over from my DC when I try a ->

kinit user@domain.com

I receive an error of:

kinit(v5): Cannot resolve network address for KDC in realm veracyte.com while getting initial credentials

when I restart smb in /var/log/messages I see the following

Jul 2 17:46:26 simi winbindd[7143]: [2010/07/02 17:46:26, 0] libads/kerberos.c:ads_kinit_password(228)
Jul 2 17:46:26 simi winbindd[7143]: kerberos_kinit_password SIMI$@VERACYTE.LAN failed: Preauthentication failed

any ideas what coul be happening here?

Thanks in adv
Oliver

]]> By: slowe http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-46818 slowe Mon, 30 Nov 2009 19:54:59 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-46818 2003 Support Tools were used, if I recall correctly. 2003 Support Tools were used, if I recall correctly.

]]> By: Jan Seidl http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-46817 Jan Seidl Mon, 30 Nov 2009 19:27:18 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-46817 Which ktpass.exe version was used? XP Support Tools', Vista's Microsoft Remote Server Administration Tools' or 2003 Support Tools'? Which ktpass.exe version was used? XP Support Tools’, Vista’s Microsoft Remote Server Administration Tools’ or 2003 Support Tools’?

]]> By: stine http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-43875 stine Mon, 16 Mar 2009 05:26:27 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-43875 run CMD elevated and use the following syntax: ktpass.exe -princ HOST/@ -mapuser \ -crypto all -pass -ptype KRB5_NT_PRINCIPAL -out filename.keytab and it works run CMD elevated and use the following syntax:

ktpass.exe -princ HOST/@ -mapuser \ -crypto all -pass -ptype KRB5_NT_PRINCIPAL -out filename.keytab

and it works

]]> By: PiGeon http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-42478 PiGeon Fri, 21 Nov 2008 11:23:56 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-42478 Hi Scott, I can confirm that in elevated command prompt works the ktpass well. BR PiGeon PS: the other way how to run app elevated is pres the "START" type in cmd and press ctrl-shift-enter and confirm YES to run the app elevated. Hi Scott, I can confirm that in elevated command prompt works the ktpass well.

BR

PiGeon

PS: the other way how to run app elevated is pres the “START” type in cmd and press ctrl-shift-enter and confirm YES to run the app elevated.

]]> By: slowe http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-34601 slowe Tue, 11 Dec 2007 23:43:50 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-34601 Ian, Thanks for the tip! I'll be sure to use this tip in the future. Keep reading! Ian,

Thanks for the tip! I’ll be sure to use this tip in the future. Keep reading!

]]> By: Ian http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/comment-page-1/#comment-34596 Ian Tue, 11 Dec 2007 19:23:27 +0000 http://blog.scottlowe.org/2007/07/09/uac-and-ktpassexe/#comment-34596 Scott, Excellent blog! I'm a CLI kind of guy myself, and this UAC limitation perpetually ticked me off as well. However, I found out that you can get a CLI shell with admin rights, but you need to use the GUI to get it. Click the start button, then SHIFT-Rclick the "Command prompt" icon. It should give you a "Run as Administrator" option. When you select that, you'll get the UAC prompt, but once you OK that, you'll get a CLI that runs as the built-in Administrator account. It's the only way I've seen so far on a Vista box to get a privledged CLI. V/R, Ian Scott,
Excellent blog! I’m a CLI kind of guy myself, and this UAC limitation perpetually ticked me off as well. However, I found out that you can get a CLI shell with admin rights, but you need to use the GUI to get it. Click the start button, then SHIFT-Rclick the “Command prompt” icon. It should give you a “Run as Administrator” option. When you select that, you’ll get the UAC prompt, but once you OK that, you’ll get a CLI that runs as the built-in Administrator account. It’s the only way I’ve seen so far on a Vista box to get a privledged CLI.

V/R,
Ian

]]>