Tools & Downloads
Tools & Downloads
The following software tools are provided as a complimentary service. There is no fee to download and use the tools, as long as you complete the required download form, download the software directly from our site, and comply with the terms of the software license agreement.
Individual use of this software is subject to the CSS Non-commercial Software License Agreement (NCSLA). Any other use of this software requires a CSS Commercial Software License Agreement (CSLA). For further information on the terms and conditions of use of this software, please review our licensing information: More »
If you would like to incorporate the use of these tools to support enterprise applications, CSS provides annual technical support contracts. The scope of the technical and help desk support contract will be customized to fit the needs and requirements of the client. In addition to providing annual support contracts, CSS is frequently asked to provide training and consulting engagements in the deployment and use of these tools. Please feel free to contact us regarding your enterprise requirements. e-mail us »
We welcome feedback for improvement of these tools. Please contact us with suggestions. e-mail us »
The ADKadmin utility is designed to allow a system administrator to manage and view user and service principals (both user accounts and computer accounts) in a Microsoft Active Directory database from a UNIX or Linux host. The tool will display many of the account’s attributes, including some that are not viewable through the Microsoft Management Console (MMC) interface. Accounts can be referenced by either principal or account name.
The utility also provides the ability to update the Kerberos key table file on the host. Version 2.2 of ADKadmin adds support for RC4-HMAC.
This version of Adkadmin interoperates with Windows Server 2003. If you need support for Windows Server 2008, please contact us. Please be aware that there is a defect in Windows Server 2008 that prevents users from setting passwords for principals containing a “/” in the name. For more information and a hotfix, see Microsoft Knowledge Base article 951191.
The GetTicket utility is designed to perform two useful Kerberos troubleshooting functions not covered by standard Kerberos utilities. The tool provides the ability to:
- Acquire a TGT using a key table entry
- Acquire a service ticket using an existing TGT
The function to acquire a service ticket is especially helpful for troubleshooting Kerberos problems where requests for initial credentials (TGTs) succeed but functions (such as Kerberos PAM logon) that require a service ticket fail.
Fill in the form below to receive a link to our downloads page: