title: Use of keytabs and service principals
body: <p>I'm struggling with is the use of keytabs and service principals. I always thought keytabs were a combination of an encrypted password and Kerberos principal. For services or hosts, however there are no actual passwords unless I'm missing something.</p>
  <p>In my case, I'm trying to use config Apache Kafka to run with Kerberos to Active Directory. Specifically I joined AD and created the SPN using the adcli command.  I can create a keytab using the ktutil command for the service principal.  However it prompts me for the password.  I've tested using a service account password and the root password with no luck.</p>
  <p>Any suggestions would be greatly appreciated.</p>