PowerCenter All Products
ktpass.exe -out <keytab filename> -princ <service principal name> -mapuser <user account> [-pass <user account password>] -crypto <key types> -ptype <principal type> [-target <realm name>]
The file name of the Kerberos keytab file to generate as shown under the
KEY_TAB_NAMEcolumn in the SPNKeytabFormat.txt file.
The service principal name displayed under the
SPNcolumn in the SPNKeytabFormat.txt file.
If the domain uses Kerberos cross realm authentication, the service principal name must be unique across all Kerberos realms.
The Active Directory user account to associate with the SPN. The account name can be a maximum of 20 characters.
The password set in Active Directory for the Active Directory user account, if applicable.
Specifies the key types generated in the keytab file.
Set to all to use all supported cryptographic types.
The principal type. Set to KRB5_NT_PRINCIPAL.
The name of the realm to which the Active Directory server belongs. Include this option if the following error occurs when you run the utility:
DsCrackNames returned 0x2 in the name