"SLC5X: system environment/daemons: kerberos-keytab-creator
kerberos-keytab-creator - This program will construct an ARC4 Kerberos key for the principal specified, using the password provided.
This program will construct an ARCFOUR Kerberos key for the principal specified, using the password provided. It does not interact with the KDC, and provides no functionality to change the principal's password.
This has been written for CERN, to replace the user keytab extraction service that is currently provided by the Heimdal realm and the kas.arc cpext routine. Active Directory does not facilitate Kerberos key extraction, and as such, this is the only method of acquiring an AD principal's Kerberos key without resetting the principal's password.