We are trying to setup a
tomcat server on RHEL 6.5 to use
Kerberos authentication. We have tried to follow this guide, but it seems more appropriate for a Windows implementation.
In our environment, the
tomcat service will run under a local user account although the server itself is part of the AD.
My query is related to the keytab file:
Does the keytab file need to be linked with a specific user? Below is the sample command from the
ktpass /out c:\tomcat.keytab /mapuser **tc01@DEV.LOCAL** /princ HTTP/win-tc01.dev.local@DEV.LOCAL /pass tc01pass /kvno 0
Does the user need to be part of the AD or can it also be a local user?