Ktpass command syntax

The ktpass command is used to map the AX Server authentication service to a Window Service Principal Name (SPN) account.

ktpass /out filename /princ name /pass password /mapuser local_username /ptype principal_type /crypto encryption_type

out filename

Specifies the name of the Kerberos keytab file to generate. You can omit this parameter if you do not want to test your configuration before running the AX Server setup wizard. If you do generate a keytab file you must ensure that the file is stored securely.

princ name

Specifies the principal name in the format: HTTP/ax.server.name@REALM.

pass password

Specifies the password for the SPN account.

mapuser local_username

Maps the name of the Kerberos principal specified in the princ parameter to the specified SPN account in Active Directory.

ptype principal_type

Specifies the principal type. KRB5_NT_PRINCIPAL is the required value.

crypto encryption_type

Specifies the encryption type. RC4-HMAC-NT is the required value.