16.3. List of IdM Kerberos keytab files and their contents

The following table displays the location, contents, and purpose of the IdM Kerberos keytab files.

Expand

表 16.1. Table
Keytab location	Contents	Purpose
`/etc/krb5.keytab`	`host` principal	Verifying user credentials when logging in, used by NFS if there is no `nfs` principal
`/etc/dirsrv/ds.keytab`	`ldap` principal	Authenticating users to the IdM database, securely replicating database contents between IdM replicas
`/var/lib/ipa/gssproxy/http.keytab`	`HTTP` principal	Authenticating to the Apache server
`/etc/named.keytab`	`DNS` principal	Securely updating DNS records
`/etc/ipa/dnssec/ipa-dnskeysyncd.keytab`	`ipa-dnskeysyncd` principal	Keeping OpenDNSSEC synchronized with LDAP
`/etc/pki/pki-tomcat/dogtag.keytab`	`dogtag` principal	Communicating with the Certificate Authority (CA)
`/etc/samba/samba.keytab`	`cifs` and `host` principals	Communicating with the Samba service
`/var/lib/sss/keytabs/ad-domain.com.keytab`	Active Directory (AD) domain controller (DCs) principals in the form `HOSTNAME$@AD-DOMAIN.COM`	Communicating with AD DCs through an IdM-AD Trust