I'm not using this myself (I create keytabs as needed manually using
ktpass.exe against AD) but this may be of interest to some of you:
http://www.eyrie.org/~eagle/software/wallet/

"One of the object types it supports is Kerberos keytabs, making it
suitable as a user-accessible front-end to Kerberos kadmind with richer
ACL and metadata operations"

<<CDC

Sebastian Galiano <Sebastian.Galiano@spil...> wrote:
> True, I'm also looking for a solution for that. I was thinking if it
> will be possible doing puppet but I'm not yet sure.
> ________________________________________
> From: kerberos-bounces@MIT.... [kerberos-bounces@MIT....] on behalf
> of Jeff Blaine [jblaine@kick...]
> Sent: 24 April 2012 15:06
> To: kerberos@mit....
> Subject: Streamlining host principal keytab provisioning?
>
> How are people provisioning host principal keytabs in
> large quantities? I've never really seen anyone discuss
> this. It's not 1988 anymore ;)

________________________________________________
Kerberos mailing list           Kerberos@mit....
https://mailman.mit.edu/mailman/listinfo/kerberos