Default Keytab File

DefaultKeytabFile

Key Name Default Value Required

DefaultKeytabFile

None

No

Description

The full path to the keytab file that the connector uses to obtain the ticket for Kerberos authentication.

Note:

  • This option is applicable only when the authentication mechanism is set to Kerberos (AuthMech=Kerberos) and the Use Keytab option is enabled (UseKeytab=1).
  • If the UPN Keytab Mapping File option (the UPNKeytabMappingFile key) is set to a JSON file with a valid mapping to a keytab, then that keytab takes precedence.

If you do not set this option but the Use Keytab option is enabled (UseKeytab=1), then the MIT Kerberos library will search for a keytab using the following search order:

  • The file specified by the KRB5_KTNAME environment variable.
  • The default_keytab_name setting in the [libdefaults] section of the Kerberos configuration file (krb5.conf/krb5.ini).
  • The default keytab file specified in the MIT Kerberos library. Typically, the default file is C:\Windows\krb5kt for Windows platforms and /etc/krb5.keytab for non-Windows platforms.

Related topics