| 1 |
|
| 2 |
KTUTIL(8) BSD System Manager's Manual KTUTIL(8) |
| 3 |
|
| 4 |
NNAAMMEE |
| 5 |
kkttuuttiill -- manage Kerberos keytabs |
| 6 |
|
| 7 |
SSYYNNOOPPSSIISS |
| 8 |
kkttuuttiill [--kk _k_e_y_t_a_b | ----kkeeyyttaabb==_k_e_y_t_a_b] [--vv | ----vveerrbboossee] [----vveerrssiioonn] |
| 9 |
[--hh | ----hheellpp] _c_o_m_m_a_n_d [_a_r_g_s] |
| 10 |
|
| 11 |
DDEESSCCRRIIPPTTIIOONN |
| 12 |
kkttuuttiill is a program for managing keytabs. Supported options: |
| 13 |
|
| 14 |
--vv, ----vveerrbboossee |
| 15 |
Verbose output. |
| 16 |
|
| 17 |
_c_o_m_m_a_n_d can be one of the following: |
| 18 |
|
| 19 |
add [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV _k_v_n_o] [----kkvvnnoo==_k_v_n_o] [--ee |
| 20 |
_e_n_c_t_y_p_e] [----eennccttyyppee==_e_n_c_t_y_p_e] [--ww _p_a_s_s_w_o_r_d] |
| 21 |
[----ppaasssswwoorrdd==_p_a_s_s_w_o_r_d] [--rr] [----rraannddoomm] [--ss] [----nnoo--ssaalltt] [--HH] |
| 22 |
[----hheexx] |
| 23 |
Adds a key to the keytab. Options that are not specified will |
| 24 |
be prompted for. This requires that you know the password or |
| 25 |
the hex key of the principal to add; if what you really want |
| 26 |
is to add a new principal to the keytab, you should consider |
| 27 |
the _g_e_t command, which talks to the kadmin server. |
| 28 |
|
| 29 |
change [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [----aa _h_o_s_t] [----aaddmmiinn--sseerrvveerr==_h_o_s_t] [----ss |
| 30 |
_p_o_r_t] [----sseerrvveerr--ppoorrtt==_p_o_r_t] |
| 31 |
Update one or several keys to new versions. By default, use |
| 32 |
the admin server for the realm of a keytab entry. Otherwise |
| 33 |
it will use the values specified by the options. |
| 34 |
|
| 35 |
If no principals are given, all the ones in the keytab are |
| 36 |
updated. |
| 37 |
|
| 38 |
copy _k_e_y_t_a_b_-_s_r_c _k_e_y_t_a_b_-_d_e_s_t |
| 39 |
Copies all the entries from _k_e_y_t_a_b_-_s_r_c to _k_e_y_t_a_b_-_d_e_s_t. |
| 40 |
|
| 41 |
get [--pp _a_d_m_i_n _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_a_d_m_i_n _p_r_i_n_c_i_p_a_l] [--ee _e_n_c_t_y_p_e] |
| 42 |
[----eennccttyyppeess==_e_n_c_t_y_p_e] [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [--aa _a_d_m_i_n |
| 43 |
_s_e_r_v_e_r] [----aaddmmiinn--sseerrvveerr==_a_d_m_i_n _s_e_r_v_e_r] [--ss _s_e_r_v_e_r _p_o_r_t] |
| 44 |
[----sseerrvveerr--ppoorrtt==_s_e_r_v_e_r _p_o_r_t] _p_r_i_n_c_i_p_a_l _._._. |
| 45 |
For each _p_r_i_n_c_i_p_a_l, generate a new key for it (creating it if |
| 46 |
it doesn't already exist), and put that key in the keytab. |
| 47 |
|
| 48 |
If no _r_e_a_l_m is specified, the realm to operate on is taken |
| 49 |
from the first principal. |
| 50 |
|
| 51 |
list [----kkeeyyss] [----ttiimmeessttaammpp] |
| 52 |
List the keys stored in the keytab. |
| 53 |
|
| 54 |
remove [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV --kkvvnnoo] [----kkvvnnoo==_k_v_n_o] |
| 55 |
[--ee --eennccttyyppee] [----eennccttyyppee==_e_n_c_t_y_p_e] |
| 56 |
Removes the specified key or keys. Not specifying a _k_v_n_o |
| 57 |
removes keys with any version number. Not specifying an |
| 58 |
_e_n_c_t_y_p_e removes keys of any type. |
| 59 |
|
| 60 |
rename _f_r_o_m_-_p_r_i_n_c_i_p_a_l _t_o_-_p_r_i_n_c_i_p_a_l |
| 61 |
Renames all entries in the keytab that match the |
| 62 |
_f_r_o_m_-_p_r_i_n_c_i_p_a_l to _t_o_-_p_r_i_n_c_i_p_a_l. |
| 63 |
|
| 64 |
purge [----aaggee==_a_g_e] |
| 65 |
Removes all old versions of a key for which there is a newer |
| 66 |
version that is at least _a_g_e (default one week) old. |
| 67 |
|
| 68 |
SSEEEE AALLSSOO |
| 69 |
kadmin(8) |
| 70 |
|
| 71 |
HEIMDAL April 14, 2005 HEIMDAL |
