1 |
|
---|
2 | KTUTIL(8) BSD System Manager's Manual KTUTIL(8)
|
---|
3 |
|
---|
4 | NNAAMMEE
|
---|
5 | kkttuuttiill -- manage Kerberos keytabs
|
---|
6 |
|
---|
7 | SSYYNNOOPPSSIISS
|
---|
8 | kkttuuttiill [--kk _k_e_y_t_a_b | ----kkeeyyttaabb==_k_e_y_t_a_b] [--vv | ----vveerrbboossee] [----vveerrssiioonn]
|
---|
9 | [--hh | ----hheellpp] _c_o_m_m_a_n_d [_a_r_g_s]
|
---|
10 |
|
---|
11 | DDEESSCCRRIIPPTTIIOONN
|
---|
12 | kkttuuttiill is a program for managing keytabs. Supported options:
|
---|
13 |
|
---|
14 | --vv, ----vveerrbboossee
|
---|
15 | Verbose output.
|
---|
16 |
|
---|
17 | _c_o_m_m_a_n_d can be one of the following:
|
---|
18 |
|
---|
19 | add [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV _k_v_n_o] [----kkvvnnoo==_k_v_n_o] [--ee
|
---|
20 | _e_n_c_t_y_p_e] [----eennccttyyppee==_e_n_c_t_y_p_e] [--ww _p_a_s_s_w_o_r_d]
|
---|
21 | [----ppaasssswwoorrdd==_p_a_s_s_w_o_r_d] [--rr] [----rraannddoomm] [--ss] [----nnoo--ssaalltt] [--HH]
|
---|
22 | [----hheexx]
|
---|
23 | Adds a key to the keytab. Options that are not specified will
|
---|
24 | be prompted for. This requires that you know the password or
|
---|
25 | the hex key of the principal to add; if what you really want
|
---|
26 | is to add a new principal to the keytab, you should consider
|
---|
27 | the _g_e_t command, which talks to the kadmin server.
|
---|
28 |
|
---|
29 | change [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [----aa _h_o_s_t] [----aaddmmiinn--sseerrvveerr==_h_o_s_t] [----ss
|
---|
30 | _p_o_r_t] [----sseerrvveerr--ppoorrtt==_p_o_r_t]
|
---|
31 | Update one or several keys to new versions. By default, use
|
---|
32 | the admin server for the realm of a keytab entry. Otherwise
|
---|
33 | it will use the values specified by the options.
|
---|
34 |
|
---|
35 | If no principals are given, all the ones in the keytab are
|
---|
36 | updated.
|
---|
37 |
|
---|
38 | copy _k_e_y_t_a_b_-_s_r_c _k_e_y_t_a_b_-_d_e_s_t
|
---|
39 | Copies all the entries from _k_e_y_t_a_b_-_s_r_c to _k_e_y_t_a_b_-_d_e_s_t.
|
---|
40 |
|
---|
41 | get [--pp _a_d_m_i_n _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_a_d_m_i_n _p_r_i_n_c_i_p_a_l] [--ee _e_n_c_t_y_p_e]
|
---|
42 | [----eennccttyyppeess==_e_n_c_t_y_p_e] [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [--aa _a_d_m_i_n
|
---|
43 | _s_e_r_v_e_r] [----aaddmmiinn--sseerrvveerr==_a_d_m_i_n _s_e_r_v_e_r] [--ss _s_e_r_v_e_r _p_o_r_t]
|
---|
44 | [----sseerrvveerr--ppoorrtt==_s_e_r_v_e_r _p_o_r_t] _p_r_i_n_c_i_p_a_l _._._.
|
---|
45 | For each _p_r_i_n_c_i_p_a_l, generate a new key for it (creating it if
|
---|
46 | it doesn't already exist), and put that key in the keytab.
|
---|
47 |
|
---|
48 | If no _r_e_a_l_m is specified, the realm to operate on is taken
|
---|
49 | from the first principal.
|
---|
50 |
|
---|
51 | list [----kkeeyyss] [----ttiimmeessttaammpp]
|
---|
52 | List the keys stored in the keytab.
|
---|
53 |
|
---|
54 | remove [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV --kkvvnnoo] [----kkvvnnoo==_k_v_n_o]
|
---|
55 | [--ee --eennccttyyppee] [----eennccttyyppee==_e_n_c_t_y_p_e]
|
---|
56 | Removes the specified key or keys. Not specifying a _k_v_n_o
|
---|
57 | removes keys with any version number. Not specifying an
|
---|
58 | _e_n_c_t_y_p_e removes keys of any type.
|
---|
59 |
|
---|
60 | rename _f_r_o_m_-_p_r_i_n_c_i_p_a_l _t_o_-_p_r_i_n_c_i_p_a_l
|
---|
61 | Renames all entries in the keytab that match the
|
---|
62 | _f_r_o_m_-_p_r_i_n_c_i_p_a_l to _t_o_-_p_r_i_n_c_i_p_a_l.
|
---|
63 |
|
---|
64 | purge [----aaggee==_a_g_e]
|
---|
65 | Removes all old versions of a key for which there is a newer
|
---|
66 | version that is at least _a_g_e (default one week) old.
|
---|
67 |
|
---|
68 | SSEEEE AALLSSOO
|
---|
69 | kadmin(8)
|
---|
70 |
|
---|
71 | HEIMDAL April 14, 2005 HEIMDAL
|
---|