From owner-freebsd-questions@FreeBSD.ORG  Mon Nov 10 12:18:34 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3016E106567B
	for <freebsd-questions@freebsd.org>;
	Mon, 10 Nov 2008 12:18:34 +0000 (UTC)
	(envelope-from ansarm@gmail.com)
Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.243])
	by mx1.freebsd.org (Postfix) with ESMTP id D24378FC1C
	for <freebsd-questions@freebsd.org>;
	Mon, 10 Nov 2008 12:18:33 +0000 (UTC)
	(envelope-from ansarm@gmail.com)
Received: by an-out-0708.google.com with SMTP id b6so289108ana.13
	for <freebsd-questions@freebsd.org>;
	Mon, 10 Nov 2008 04:18:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:from:to:subject:date
	:message-id:mime-version:content-type:x-mailer:thread-index
	:content-language;
	bh=sIq8aAPgDKcw4TYLtkOOlq7A1KKeXGEt3szjuCXA+cI=;
	b=ab+mbtiX3mDQ9xlnQVH67/wOs5FRtNrN27tM/HKsVYwt7GetkRR1WZ443GU16jQWrx
	DBZJ9P6Yux/cmT2xEHm6SdpSZ3Nw0N+M3YpT0JzD8ZYInEp0KA5W2swqpcL+aa0DWC99
	2K1ceaO5llvvVCAcJ63dbf51vnp4naENl44PM=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=from:to:subject:date:message-id:mime-version:content-type:x-mailer
	:thread-index:content-language;
	b=ba8/wAGz2twSw6wCsZzYnZA5zx67JaHM6vwTJAGk1ClJNiDgm3y6cVjMuuAi9zp8AK
	Fjh1bBdWRSE+e/kVXEpewAZc8ONdl+ElNoCXrjNVsKcwMGxkTCzY7dIkrPdlxfQNAim8
	1o359S2YFqbOtPBRQWNgVqX6g/kj7RqfnxsC8=
Received: by 10.65.73.16 with SMTP id a16mr6689157qbl.89.1226319512773;
	Mon, 10 Nov 2008 04:18:32 -0800 (PST)
Received: from ansarmm2 (206-248-188-124.dsl.teksavvy.com [206.248.188.124])
	by mx.google.com with ESMTPS id p30sm11566597qbp.14.2008.11.10.04.18.31
	(version=SSLv3 cipher=RC4-MD5); Mon, 10 Nov 2008 04:18:31 -0800 (PST)
From: "Ansar Mohammed" <ansarm@gmail.com>
To: <freebsd-questions@freebsd.org>
Date: Mon, 10 Nov 2008 07:18:30 -0500
Message-ID: <0edc01c9432e$720b9c90$5622d5b0$@com>
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AclDLnBIWRWDpwqrQKCY7APoVER/Ow==
Content-Language: en-ca
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Kerberos keytab
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 10 Nov 2008 12:18:34 -0000

Does anyone know what is the actual purpose of the Kerberos krb5.keytab
file?

 

 I have a freebsd 7 configured to authenticate users via Kerberos (both
apache and ssh).

 

Although the authentication between apache and browser is still basic and
between the ssh client and server is still keyboard interactive. FreeBSD
validates the account in the background using Kerberos to AD.