kerberos authentication- functional group

Question

I have some AD users, which are linked to a functional group. My question is how to mention this functional group into keytab command? as per my understanding keytab uses AD username and password. Also is it mandatory to mention password in keytab command?

Syntax:

ktpass –princ HTTP/@ -mapuser –pass password -crypto all -ptype KRB5_NT_PRINCIPAL –out

Answer 1

1. The ktpass keytab creation syntax does not accept groups as part of the command arguments.
2. It is not necessary to mention the password IF you use the +rndPass argument, which randomizes the password. You can either randomize the password or specify it, but you have to pick one or the other. You cannot leave it out.