Creating a Keytab File on Windows

On Windows platforms, the services.keytab file is created using Active Directory Domain Services (AD DS) on a Windows server.

To create a services.keytab file, do the following:

1. Using Active Directory Domain Services on the Windows server, create a “user” with the same name as the MarkLogic Server hostname. For example, if the MarkLogic Server is named mysrvr.marklogic.com, create a user with the name mysrvr.marklogic.com.

2. Create a keytab file with the principal HTTP/hostname using ktpass command of the form:

   Copy

   ktpass princ HTTP/<hostname> mapuser <user-account> pass <password> 
   out <filename>
   

   For example, to create a keytab file for the host named mysrvr.marklogic.com, do the following:

   Copy

   ktpass princ HTTP/mysrvr.marklogic.com@MLTEST1.LOCAL 
   mapuser mysrvr.marklogic.com@MLTEST1.LOCAL pass mysecret 
   out services.keytab
   

3. Copy the services.keytab from the Windows server to the MarkLogic Server data directory on your MarkLogic Server.