...
Step 1: Run ktpass to generate the initial keytab for the correct/canonical SPN:
| Code Block | ||
|---|---|---|
| ||
ktpass /princ HTTP/wiki.example.com@EXAMPLE.LOCAL /mapuser mqdom\MQ_S_CONFLUENCE /crypto AES256-SHA1 /pass * /ptype KRB5_NT_PRINCIPAL /out C:\my.keytab |
...
Step 2: Run ktpass again to add a key for the alias, without setting the password again:
| Code Block | ||
|---|---|---|
| ||
ktpass /princ HTTP/confluence.example.com@EXAMPLE.LOCAL /mapuser mqdom\MQ_S_CONFLUENCE /crypto AES256-SHA1 /pass * /ptype KRB5_NT_PRINCIPAL /in C:\my.keytab /out C:\my_merged.keytab -setpass |
...