| 1 |
|
|---|
| 2 | KTUTIL(8) BSD System Manager's Manual KTUTIL(8)
|
|---|
| 3 |
|
|---|
| 4 | NNAAMMEE
|
|---|
| 5 | kkttuuttiill -- manage Kerberos keytabs
|
|---|
| 6 |
|
|---|
| 7 | SSYYNNOOPPSSIISS
|
|---|
| 8 | kkttuuttiill [--kk _k_e_y_t_a_b | ----kkeeyyttaabb==_k_e_y_t_a_b] [--vv | ----vveerrbboossee] [----vveerrssiioonn]
|
|---|
| 9 | [--hh | ----hheellpp] _c_o_m_m_a_n_d [_a_r_g_s]
|
|---|
| 10 |
|
|---|
| 11 | DDEESSCCRRIIPPTTIIOONN
|
|---|
| 12 | kkttuuttiill is a program for managing keytabs. Supported options:
|
|---|
| 13 |
|
|---|
| 14 | --vv, ----vveerrbboossee
|
|---|
| 15 | Verbose output.
|
|---|
| 16 |
|
|---|
| 17 | _c_o_m_m_a_n_d can be one of the following:
|
|---|
| 18 |
|
|---|
| 19 | add [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV _k_v_n_o] [----kkvvnnoo==_k_v_n_o] [--ee
|
|---|
| 20 | _e_n_c_t_y_p_e] [----eennccttyyppee==_e_n_c_t_y_p_e] [--ww _p_a_s_s_w_o_r_d]
|
|---|
| 21 | [----ppaasssswwoorrdd==_p_a_s_s_w_o_r_d] [--rr] [----rraannddoomm] [--ss] [----nnoo--ssaalltt] [--HH]
|
|---|
| 22 | [----hheexx]
|
|---|
| 23 | Adds a key to the keytab. Options that are not specified will
|
|---|
| 24 | be prompted for. This requires that you know the password or
|
|---|
| 25 | the hex key of the principal to add; if what you really want
|
|---|
| 26 | is to add a new principal to the keytab, you should consider
|
|---|
| 27 | the _g_e_t command, which talks to the kadmin server.
|
|---|
| 28 |
|
|---|
| 29 | change [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [----aa _h_o_s_t] [----aaddmmiinn--sseerrvveerr==_h_o_s_t] [----ss
|
|---|
| 30 | _p_o_r_t] [----sseerrvveerr--ppoorrtt==_p_o_r_t]
|
|---|
| 31 | Update one or several keys to new versions. By default, use
|
|---|
| 32 | the admin server for the realm of a keytab entry. Otherwise
|
|---|
| 33 | it will use the values specified by the options.
|
|---|
| 34 |
|
|---|
| 35 | If no principals are given, all the ones in the keytab are
|
|---|
| 36 | updated.
|
|---|
| 37 |
|
|---|
| 38 | copy _k_e_y_t_a_b_-_s_r_c _k_e_y_t_a_b_-_d_e_s_t
|
|---|
| 39 | Copies all the entries from _k_e_y_t_a_b_-_s_r_c to _k_e_y_t_a_b_-_d_e_s_t.
|
|---|
| 40 |
|
|---|
| 41 | get [--pp _a_d_m_i_n _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_a_d_m_i_n _p_r_i_n_c_i_p_a_l] [--ee _e_n_c_t_y_p_e]
|
|---|
| 42 | [----eennccttyyppeess==_e_n_c_t_y_p_e] [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [--aa _a_d_m_i_n
|
|---|
| 43 | _s_e_r_v_e_r] [----aaddmmiinn--sseerrvveerr==_a_d_m_i_n _s_e_r_v_e_r] [--ss _s_e_r_v_e_r _p_o_r_t]
|
|---|
| 44 | [----sseerrvveerr--ppoorrtt==_s_e_r_v_e_r _p_o_r_t] _p_r_i_n_c_i_p_a_l _._._.
|
|---|
| 45 | For each _p_r_i_n_c_i_p_a_l, generate a new key for it (creating it if
|
|---|
| 46 | it doesn't already exist), and put that key in the keytab.
|
|---|
| 47 |
|
|---|
| 48 | If no _r_e_a_l_m is specified, the realm to operate on is taken
|
|---|
| 49 | from the first principal.
|
|---|
| 50 |
|
|---|
| 51 | list [----kkeeyyss] [----ttiimmeessttaammpp]
|
|---|
| 52 | List the keys stored in the keytab.
|
|---|
| 53 |
|
|---|
| 54 | remove [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV --kkvvnnoo] [----kkvvnnoo==_k_v_n_o]
|
|---|
| 55 | [--ee --eennccttyyppee] [----eennccttyyppee==_e_n_c_t_y_p_e]
|
|---|
| 56 | Removes the specified key or keys. Not specifying a _k_v_n_o
|
|---|
| 57 | removes keys with any version number. Not specifying an
|
|---|
| 58 | _e_n_c_t_y_p_e removes keys of any type.
|
|---|
| 59 |
|
|---|
| 60 | rename _f_r_o_m_-_p_r_i_n_c_i_p_a_l _t_o_-_p_r_i_n_c_i_p_a_l
|
|---|
| 61 | Renames all entries in the keytab that match the
|
|---|
| 62 | _f_r_o_m_-_p_r_i_n_c_i_p_a_l to _t_o_-_p_r_i_n_c_i_p_a_l.
|
|---|
| 63 |
|
|---|
| 64 | purge [----aaggee==_a_g_e]
|
|---|
| 65 | Removes all old versions of a key for which there is a newer
|
|---|
| 66 | version that is at least _a_g_e (default one week) old.
|
|---|
| 67 |
|
|---|
| 68 | SSEEEE AALLSSOO
|
|---|
| 69 | kadmin(8)
|
|---|
| 70 |
|
|---|
| 71 | HEIMDAL April 14, 2005 HEIMDAL
|
|---|
