Cisco NAC AD SSO: KTPass.exe error (DsCrackNames returned 0x2 in the name entry for ...)

edwardwaithaka · ‎08-19-2010

Hi,

I get the following error when I try to run KTPass.exe command;

C:\Program Files\Support Tools>ktpass -princ ccasso/sst-vu27keb2zd2.NACII.com@NACII.COM -mapuser ccasso -pass cisco123
DsCrackNames returned 0x2 in the name entry for ccasso.
ktpass:failed getting target domain for specified user.

C:\Program Files\Support Tools>

Whats up?

I have created the ccasso user.

edwardwaithaka · ‎08-19-2010

Causes

ktpass needs more info

You need to specify the user more fully, by prefacing the user name
with the domain name (NACII\) where DOMAIN name is the NetBIOS version of the AD domain.:

C:\Program Files\Support Tools>ktpass -princ ccasso/sst-vu27keb2zd2.NACII.com@NACII.COM -mapuser NACII\ccasso -pass cisco123 -out c:\test.ke
ytab -ptype KRB5_NT_PRINCIPAL +DesOnly
Targeting domain controller: sst-vu27keb2zd2.NACII.com
Using legacy password setting method
Successfully mapped ccasso/sst-vu27keb2zd2.NACII.com to ccasso.
Key created.
Output keytab to c:\test.keytab:
Account ccasso has been set for DES-only encryption.