The KCD Keytab Script dialog box
generates the keytab script, which in turn generates the keytab file necessary
to configure KCD on the
To generate the
KCD keytab script by using the configuration utility
Security > AAA - Application
details pane, under
Kerberos Constrained Delegation, click
Batch file to generate keytab.
Generate KCD (Kerberos Constrained Delegation) Keytab
Script dialog box, fill out the fields as described below.
Domain User Name: The
name of the domain user.
Domain Password: The
password for the domain user.
Service Principal: The
Output File Name: A
filename for the KCD script file.
Create Domain User
Account: Select this check box to create the specified domain user account.
Generate Script to generate the script.
script is generated, and appears in the
Generated Script text box below the Generate Script button.
script, and save it as a file on your AD domain controller.
now run this script on the domain controller to generate the keytab file, and
then copy the keytab file to the
/nsconfig/krb/ directory on the