Ktpass: failed getting target domain for specified user

Hi all,
I am trying to generate keytab file by following document 
http://docs.oracle.com/cd/E17904_01/doc.1111/e15740/wna.htm#REGADWNA
relevant section 7.3.2.
Environment we are using as follows:
Microsoft windows server 2008
Command executed :
ktpass /princ [email protected] /mapuser [email protected] /pass Micro123 /out c:\poc.keytab
Here NTDS (AD windows service name)
MSCAD.AE (AD domain name)
[email protected] (AD user)
Micro123 (Password)
c:\poc.keytab (file location)
while executing display error as response:
C:\>ktpass /princ [email protected] /mapuser [email protected] /pass Micro123 /out c:\poc.keytab
Cannot bind to default domain: 0x54b
ktpass:failed getting target domain for specified user.
Your assistance in this regard would be highly desirable.
Regards,
Syed Waqar

I don't think you have your principal name defined correctly. 
It should be in the following format:
host/[email protected]
http://technet.microsoft.com/en-us/library/cc753771.aspx
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.

Similar Messages

  • Error.  Cannot install public key for specified user

    I'm getting "Error. Cannot install public key for specified user" when trying to add a public ssh key for a service processor user on a V20z. I've tried it for different users and still get the error. The same operation works fine on a V40z. Any help would be appreciated.

    That would be great if the resolution was that simple.  I am using a public key I generated using the putty key generator.  Below is the key I would use if I got that far.  However I get an error on the "ssh authentication publickey" attribute so I never get the chance to enter a public key.  What code version and hardware version are you running that this worked on?
    AAAAB3NzaC1yc2EAAAABJQAAAIEA2h00RCKBbpbrTWSe/3TYAvRpkJz7tLwQDCf9
    4fDJUWUGrmxXHeomuBhNGZh7tyfFjRL2CKY6nWmFyKN/eDm0PF4IWhhCArzOPVDu
    q7Nu2y/pD8wWH8dH4a3zRpkLSekNJtH6lzuqmY0zqz9TnZlpS6g4LI1a+lOGSmhU
    /HySw9s=
    ciscoasa(config)#username test nopassword privilege 15
    ciscoasa(config)#username test attributes
    ciscoasa(config-username)#ssh ?
    configure mode commands/options:
      Hostname or A.B.C.D  The IP address of the host and/or network authorized to
                           login to the system
      X:X:X:X::X/<0-128>   IPv6 address/prefix authorized to login to the system
      scopy                Secure Copy mode
      timeout              Configure ssh idle timeout
      version              Specify protocol version to be supported
    exec mode commands/options:
      disconnect  Specify SSH session id to be disconnected after this keyword
    ciscoasa(config-username)# ssh
    ciscoasa(config-username)# sh ver | in Ver
    Cisco Adaptive Security Appliance Software Version 9.1(1)
    Device Manager Version 7.1(1)52
    ciscoasa(config-username)#

  • How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

    SAB BO 4.1 SP1
    Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

    Hello Ricardo,
    have you try a call like this one ?
        <schedule>
          <name>"test"</name>"
          <format type=\"webi\"/>
          <destination>
            <inbox>
             <to>userId1,userId2,userId3,groupId1,groupId12</to>
            </inbox>
          </destination>
        </schedule>
    Regards
    Stephane

  • FindGroups - Error while getting group list for login user

    Hi All,
    I am using below code snippet to search a group in OIM but it gives me "Error while getting group list for login user" error message.
    tcResultSet rsetAss = null;
    tcGroupOperationsIntf groupIntf = (tcGroupOperationsIntf)utilFactory.getUtility("Thor.API.Operations.tcGroupOperationsIntf");
    HashMap mapGrp = new HashMap();
    mapGrp.put("Groups.Group Name","DEF_GROUP");
    rsetAss = groupIntf.findGroups(mapGrp);     
    And i am ruuning this code using xelsysadm logon.
    com.thortech.xl.util.config.ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
    Hashtable env = config.getAllSettings();
    com.thortech.xl.crypto.tcSignatureMessage moSignature = tcCryptoUtil.sign("xelsysadm", "PrivateKey");
    utilFactory = new tcUtilityFactory(env, moSignature);     
    Any guess?
    Thanks & Regards
    Inbaa.

    Here it is Rajiv,
    public class GetUserApprover {
    private String defGroup = "DEF_GROUP";
    public tcUtilityFactory getUtilFactory()
    tcUtilityFactory utilFactory = null;
    try
         logger.debug("Initializing the utilFactory");
         com.thortech.xl.util.config.ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
    Hashtable env = config.getAllSettings();
    com.thortech.xl.crypto.tcSignatureMessage moSignature = tcCryptoUtil.sign("xelsysadm", "PrivateKey");
    utilFactory = new tcUtilityFactory(env, moSignature);
    catch(Exception ex)
         logger.info("Error while getting the utilFactory" + ex.getMessage());
         System.out.println(ex.getMessage());
    return utilFactory;
    public String getGroupKey(String defGroup){
              String groupKey = null;
              tcUtilityFactory utilFactory = getUtilFactory();
              if(utilFactory != null)
         System.out.println("utilFactory not null. Searching for group:" +defGroup );
                   try
              tcResultSet rsetAss = null;
              tcGroupOperationsIntf groupIntf = (tcGroupOperationsIntf)utilFactory.getUtility("Thor.API.Operations.tcGroupOperationsIntf");
              HashMap mapGrp = new HashMap();
              mapGrp.put("Groups.Group Name","DEF_OWNER_GROUP");
              System.out.println("Finding Group....");
              rsetAss = groupIntf.findGroups(mapGrp);          
              System.out.println("RowCount-->" +rsetAss.getRowCount() );
              rsetAss.goToRow(0);
              groupKey = rsetAss.getStringValue("Groups.Key");
         System.out.println("GroupKey-->" + groupKey);
         catch(Exception e){
              System.out.println("Error" + e.getMessage());
              return (java.lang.Object)groupKey;
    }

  • I want to get desktop path for client user using webutil

    oracle database 11g
    oracle forms 10 g
    client windows
    i want to get desktop path for client user using webutil
    as i want to save file in this path

    To get the user's path to their Desktop is a two step process.  First, you have to echo the %USERPROFILE% to a output file and secondly, read the directory from the output file in to Forms.  The code would look similar to the following:
    /* When-Button-Pressed trigger */
    DECLARE
      v_temp_path VARCHAR2(250);
      v_temp_file VARCHAR2(12) := 'webutil.log';
      f_file Client_Text_IO.File_Type;
    BEGIN
      Client_Host('cmd /c echo %USERPROFILE%\Desktop > c:\'||v_temp_file);
      f_file := Client_Text_Io.FOpen('c:\'||v_temp_file, 'R');
    Client_Text_Io.Get_Line(f_file,v_temp_path);
    Client_Text_Io.FClose(f_file);
       b_dummy := WebUtil_File.Delete_File('C:\'||v_temp_file);
      --At this point, you have the path stored in the v_temp_path variable.
      --You can assign this variable to a block item or reference it directly in your code.
    END;
    When you reference the value of the v_temp_path, don't forget to wrap the value in double-quotes (" ") becuase the path will have spaces.  Since your plan is to write a file to the user's desktop, your call to FOPEN will look  like this:
    f_file := Client_Text_Io.FOpen('"'||v_temp_file||'"','W');
    Hope this helps,
    Craig...

  • How to send Emails to Other Domain for the users in My AD

    Hi All,
    I have a Domain test.com and in this i created 10 users and now i in the properties of their account i added mail address as ****.dummy.com (which is not my domain which i have created separately and there is no relation between these two) No will the mails
    will be deliverd to those users??
    Thanks

    Is this "other domain" you are talking about just an SMTP domain, or a Windows domain?  If the former, and there is a messaging system they can receive with, you can just send (though you may need a send connector).  If the latter,
    is it in the same Windows forest?  If so, you need to prepare the domain for Exchange (using Setup /PrepareDomain).  You can then add that domain to your Accepted Domain list (in the Organization configuration, Hub Transport role) and create
    mailboxes for these users.  Once the have mailboxes, they will receive email.  Until all of this happens, they won't be able to get mail.

  • Get all Groups for current user

    Hi I try to get all groups for the current logged on user. This is what I do:
    First I try to search with the IGruopSearchFilter to obtain all unique Group IDs. I always get an proxy error by doing this, maybe the query is to much.
    Then I want to use the method group.isUserMember(user.getUniqueID() to check whether the user is a member of that group or not.
    Is there a better way to obtain all groups for a user (without using a query IGroupSearchFilter)?
    Thanks ahead for your help.
    Burkhardt

    Burkhadrt,
    have you tried this?
    https://media.sdn.sap.com/javadocs/preNW04/SP2/60_sp2_javadocs/ume/com/sap/security/api/IUser.html#getParentGroups(boolean)
    This should give you an iterator for all groups the given user is assigned to.
    Hope it helps... and if so:
    if (helpful) {
      points++
    Regards,
    Dominik

  • Get IP Address For  a user name from Terminal

    hi experts,
    Can any one help me in finding the IP address for a user id.I want to find the ids for multiple logons.
    I tried using TERMINAL_ID_GET but it returns the IP only based on the user id.So i am getting only one IP.
    I tried with CL_GUI_FRONTEND_SERVICES=>GET_IP_ADDRESS and faced a same problem.
    So i want t find the IP address with respect to user id and Terminal ID.
    With thanks in  advance,
    Syed Ibrahim . G

    Hi,
    just check transaction SM04 (or program RSM04000_ALV). The program determines also the terminal ID and the IP adress.
      if long_usr_list = th_true.
          call 'ThUsrInfo' id 'OPCODE' field opcode_long_list
          id 'TABUSR' field usr_tabl-*sys*.
      else.
        call 'ThUsrInfo' id 'OPCODE' field opcode_list
          id 'TABUSR' field usr_tabl-*sys* .
      endif.
    Such calls usually should not be used. But anyway. Maybe this is helpful.
    Kind regards
    Rudi

  • Get Windows domain name and user through jsp

    I have a jsp page that will be viewed through ie on windows platform, that is a member of domain.
    I need to get the domain name and logged in windows user name to use it in my page.
    I've looked through similar topics. Found no answer.
    1.
    System.parameter("user.name") is not ok. it returns user that runs jvm.
    2.
    import com.sun.security.auth.module.NTSystem;
    NTSystem system = new NTSystem();
    system.getDomain()
    system.getName()that didn't work through jsp, though the answer is correct.
    3. I found some api at http://www.sinotar.com/download/swin/doc/index.html
    it did the right thing, but it's not free.
    Could anyone advice me smth?
    I've looked

    well, it won't work in your jsp because jsps run server-side
    could try putting an applet on your page that does it, but I wouldn't be surprised if the security manager put the kibosh on that, too
    a third - but clunky - way would be to write a quick java app that does it, and launch it through WebStart. bit ugly, and needs extra user input they might not want to do

  • Always getting Invalid Pasword for Oracle User SYS

    Hello,
    I am installing IFS on Win XP.
    My database is on a remote machine.
    When I start with the configuration assistent of Oracle SMDK, he ask me to define the database to use.
    When I click on next I allways get the message Invallid pasword for Oracle user SYS
    I tested the connection via Oracle 9i client an that works properly.
    Can anyone help me please
    Thx in advantage.
    Database version: Oracle 9I Release 9.2.0.1.0
    Internet File system version: Oracle CM SDK

    I found the answer: getting the username with Get User Info on the User object gave me the username in a String. Using that, it worked like a charm.

  • PLD Layouts - Identifying which are default for specified users

    Hi Experts,
    We have around 30 invoice layouts - we are in the process of deleting the older obsolete layouts.
    However, some them are set as default layouts for specifc users.  I was hoping to write a query to identify layouts and which users have them set as default.
    The layout header table is RDOC.  Which tables contain the list of users assigned to each layout?
    Thanks
    Greig

    The table where this information is stored is RDFL
    SELECT DoumntDode, UserId, DfltReport, CardCode
    FROM [dbo].[RDFL]
    Sample data
    DoumntDode      UserId       DfltReport   CardCode
    JDT7              12           JDT70003        -1
    RDR1              -1           RDR10003        C20000
    DoumntDode = RDOC.DocCode
    UserId = OUSR.UserId..........................-1 indicates all users
    similarly if CardCode has -1 then specific users all BP's
    Suda

  • [SOLVED] xhost access control does not work for specified users

    After last upgrade of xorg to v1.17.1-1 I get message: "unable to open display ":0" " when trying to run any window application as user specified in xhost. My xhost list looks like:
    access control enabled, only authorized clients can connect
    SI:localuser:steam
    SI:localuser:root
    But if I disable access control for everyone by invoking "xhost +" applications run on another accounts without problems. Does anyone has that problem too?
    Last edited by slx (2015-02-22 12:24:17)

    slx wrote:I see that fix is pending http://lists.x.org/archives/xorg-devel/ … 45644.html
    Can you test package here http://pkgbuild.com/~lcarlier/test/ ?

  • How to approach in getting the dates for the user given periods

    Hi All,
    I have areuirement where the calendar would be like as 466 for a period
    for eg. period 1(Jan) has 4 weeks
    period 2(Feb) has 6 weeks
    period 3(Mar) has 6 weeks
    again period 4(Apr) has 4 weeks
    period 5(May) has 6 weeks
    period 6(June) has 6 weeks
    How to get the dates (from date and end date) for the periods.
    Anybody's help will be appreciated
    Regards
    Saugata

    I have areuirement where the calendar would be like as 466 for a periodWhat does that mean? Is 466 the format of the data?
    The end date depends on the start date. This query might be helpful for you
    SQL> WITH data AS(
      2    SELECT 1 period, 4 duration FROM dual UNION ALL
      3    SELECT 2, 6 FROM dual UNION ALL
      4    SELECT 3, 6 FROM dual UNION ALL
      5    SELECT 4, 4 FROM dual UNION ALL
      6    SELECT 5, 6 FROM dual UNION ALL
      7    SELECT 6, 6 FROM dual)
      8  SELECT
      9    period,
    10    duration,
    11    SYSDATE + SUM(duration) OVER (ORDER BY period RANGE UNBOUNDED PRECEDING) * 7 AS end_date
    12  FROM data
    13  ;
        PERIOD   DURATION END_DATE
             1          4 16-NOV-07
             2          6 28-DEC-07
             3          6 08-FEB-08
             4          4 07-MAR-08
             5          6 18-APR-08
             6          6 30-MAY-08
    6 rows selected.
    SQL>

  • Standard SAP Report to get Manager PERNRs for specified Employee PERNRs

    Hello All,
    Is there any standard report whcih I can use to pass Employee PERNRs in the selection, and get the respective Manager PERNRs as output?
    Thanks,
    NS

    Nakul,
    For you information, PA and OM is be organized in the O-S-P(organization-position-person)  format
    There is no direct relationship between the employee to employee. It is like
    Employee to Employee position
    Then position to position (A002 - Reporting line)
    Then position to employee (Reporting Manager).
    For any coding part Check this link
    Re: Getting reporting data of all pernrs
    Regards,
    Anand babu R

  • How can I disable "Modify Dashboard" for specified USER?

    I want to disable "Modify Dashboard" for users. But I can't find which rights (in Manage privileges) is for this feature.
    SORRY duplicate with Link: disable edit dashboard for groups
    Edited by: Vlada on Sep 26, 2008 10:37 AM

    This is done in the "permissions"of the dashboard. You have to set it for each dashboard if the user some create dashboard rights.
    regards
    John
    http://obiee101.blogspot.com/

Maybe you are looking for