Fortinet black logo

CLI Reference

user krb-keytab

Configure Kerberos keytab entries.

  config user krb-keytab
      Description: Configure Kerberos keytab entries.
      edit <name>
          set pac-data [enable|disable]
          set principal {string}
          set ldap-server {string}
          set keytab {var-string}
      next
  end

config user krb-keytab

Parameter Name Description Type Size
pac-data Enable/disable parsing PAC data in the ticket.
enable: Enable parsing PAC data in the ticket.
disable: Disable parsing PAC data in the ticket.
option -
principal Kerberos service principal, e.g. HTTP/fgt.example.com@EXAMPLE.COM. string Maximum length: 511
ldap-server LDAP server name. string Maximum length: 35
keytab base64 coded keytab file containing a pre-shared key. var-string Maximum length: 2047

Configure Kerberos keytab entries.

  config user krb-keytab
      Description: Configure Kerberos keytab entries.
      edit <name>
          set pac-data [enable|disable]
          set principal {string}
          set ldap-server {string}
          set keytab {var-string}
      next
  end

config user krb-keytab

Parameter Name Description Type Size
pac-data Enable/disable parsing PAC data in the ticket.
enable: Enable parsing PAC data in the ticket.
disable: Disable parsing PAC data in the ticket.
option -
principal Kerberos service principal, e.g. HTTP/fgt.example.com@EXAMPLE.COM. string Maximum length: 511
ldap-server LDAP server name. string Maximum length: 35
keytab base64 coded keytab file containing a pre-shared key. var-string Maximum length: 2047