Unable to execute ktpass command while creating keytab file in Kerberos authentication: ERROR: "Password set failed! 0x00000032"

Unable to execute ktpass command while creating keytab file in Kerberos authentication: ERROR: "Password set failed! 0x00000032"

book

Article ID: KB0075791

calendar_today

Updated On:

Products Versions
Spotfire Server All Versions

Description

You may come across the following error while creating a keytab file using the ktpass command for Kerberos Authentication:

-------------
Failed to set property 'servicePrincipalName' to 'HTTP/tssdemo01.test.lab'
on Dn 'CN=SER_SpotfireSSO,OU=Service Accounts,DC=test,DC=lab: 0x32.

WARNING: Unable to set SPN mapping data.
If SER_SpotfireSSO already has an SPN mapping installed for HTTP/tssdemo01.test.lab, this is no cause for concern.

Type the password for HTTP/tssdemo01.test.lab:
Type the password again to confirm:
Password set failed! 0x00000032
Aborted.
----------------------

Casue:
  • The user account executing "ktpass" command does not have the proper Administrative rights on the domain.

Issue/Introduction

Unable to execute the ktpass command while creating a keytab file in Kerberos authentication: ERROR: "Password set failed! 0x00000032"

Environment

OS: All supported Operating Systems.

Resolution

You need to login to the computer with a Domain Administrator or as a User which is a member of the built in Account Operators domain group to execute the "ktpass" command.

Additional Information

https://docs.tibco.com/pub/spotfire_server/7.6.1/doc/html/tsas_admin_help/GUID-48920907-A433-4383-9637-52457D05C68A.html
https://social.technet.microsoft.com/Forums/ie/en-US/e712d4ec-f2d8-4e03-8925-4e259edb4e1e/kerberos-ktpass-problem?forum=winserversecurity