Merge from vendor branch NTPD:
[dragonfly.git] / crypto / heimdal / admin / ktutil.cat8
1 KTUTIL(8)               NetBSD System Manager's Manual               KTUTIL(8)
2
3 N\bNA\bAM\bME\bE
4      k\bkt\btu\but\bti\bil\bl - manage Kerberos keytabs
5
6 S\bSY\bYN\bNO\bOP\bPS\bSI\bIS\bS
7      k\bkt\btu\but\bti\bil\bl [-\b-k\bk _\bk_\be_\by_\bt_\ba_\bb | -\b--\b-k\bke\bey\byt\bta\bab\bb=\b=_\bk_\be_\by_\bt_\ba_\bb] [-\b-v\bv | -\b--\b-v\bve\ber\brb\bbo\bos\bse\be] [-\b--\b-v\bve\ber\brs\bsi\bio\bon\bn] [-\b-h\bh |
8      -\b--\b-h\bhe\bel\blp\bp] _\bc_\bo_\bm_\bm_\ba_\bn_\bd [_\ba_\br_\bg_\bs]
9
10 D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
11      k\bkt\btu\but\bti\bil\bl is a program for managing keytabs.  _\bc_\bo_\bm_\bm_\ba_\bn_\bd can be one of the fol-
12      lowing:
13
14      add [-\b-p\bp _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b--\b-p\bpr\bri\bin\bnc\bci\bip\bpa\bal\bl=\b=_\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b-V\bV _\bk_\bv_\bn_\bo] [-\b--\b-k\bkv\bvn\bno\bo=\b=_\bk_\bv_\bn_\bo] [-\b-e\be
15                  _\be_\bn_\bc_\by_\bp_\be] [-\b--\b-e\ben\bnc\bct\bty\byp\bpe\be=\b=_\be_\bn_\bc_\bt_\by_\bp_\be] [-\b-w\bw _\bp_\ba_\bs_\bs_\bw_\bo_\br_\bd]
16                  [-\b--\b-p\bpa\bas\bss\bsw\bwo\bor\brd\bd=\b=_\bp_\ba_\bs_\bs_\bw_\bo_\br_\bd] [-\b-r\br] [-\b--\b-r\bra\ban\bnd\bdo\bom\bm] [-\b-s\bs] [-\b--\b-n\bno\bo-\b-s\bsa\bal\blt\bt]
17                  Adds a key to the keytab. Options that are not specified will
18                  be prompted for. This requires that you know the password of
19                  the principal to add; if what you really want is to add a new
20                  principal to the keytab, you should consider the _\bg_\be_\bt command,
21                  which talks to the kadmin server.
22
23      change [-\b-r\br _\br_\be_\ba_\bl_\bm] [-\b--\b-r\bre\bea\bal\blm\bm=\b=_\br_\be_\ba_\bl_\bm] [-\b--\b-a\ba _\bh_\bo_\bs_\bt] [-\b--\b-a\bad\bdm\bmi\bin\bn-\b-s\bse\ber\brv\bve\ber\br=\b=_\bh_\bo_\bs_\bt] [-\b--\b-s\bs
24                  _\bp_\bo_\br_\bt] [-\b--\b-s\bse\ber\brv\bve\ber\br-\b-p\bpo\bor\brt\bt=\b=_\bp_\bo_\br_\bt]
25                  Update one or several keys to new versions.  By default, use
26                  the admin server for the realm of an keytab entry.  Otherwise
27                  it will use the values specified by the options.
28
29                  If no principals are given, all the ones in the keytab are
30                  updated.
31
32      copy _\bk_\be_\by_\bt_\ba_\bb_\b-_\bs_\br_\bc _\bk_\be_\by_\bt_\ba_\bb_\b-_\bd_\be_\bs_\bt
33                  Copies all the entries from _\bk_\be_\by_\bt_\ba_\bb_\b-_\bs_\br_\bc to _\bk_\be_\by_\bt_\ba_\bb_\b-_\bd_\be_\bs_\bt.
34
35      get [-\b-p\bp _\ba_\bd_\bm_\bi_\bn _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b--\b-p\bpr\bri\bin\bnc\bci\bip\bpa\bal\bl=\b=_\ba_\bd_\bm_\bi_\bn _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b-e\be _\be_\bn_\bc_\bt_\by_\bp_\be]
36                  [-\b--\b-e\ben\bnc\bct\bty\byp\bpe\bes\bs=\b=_\be_\bn_\bc_\bt_\by_\bp_\be] [-\b-r\br _\br_\be_\ba_\bl_\bm] [-\b--\b-r\bre\bea\bal\blm\bm=\b=_\br_\be_\ba_\bl_\bm] [-\b-a\ba _\ba_\bd_\bm_\bi_\bn
37                  _\bs_\be_\br_\bv_\be_\br] [-\b--\b-a\bad\bdm\bmi\bin\bn-\b-s\bse\ber\brv\bve\ber\br=\b=_\ba_\bd_\bm_\bi_\bn _\bs_\be_\br_\bv_\be_\br] [-\b-s\bs _\bs_\be_\br_\bv_\be_\br _\bp_\bo_\br_\bt]
38                  [-\b--\b-s\bse\ber\brv\bve\ber\br-\b-p\bpo\bor\brt\bt=\b=_\bs_\be_\br_\bv_\be_\br _\bp_\bo_\br_\bt] _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl _\b._\b._\b.
39                  For each _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl, generate a new key for it (creating it if
40                  it doesn't already exist), and put that key in the keytab.
41
42                  If no _\br_\be_\ba_\bl_\bm is specified, the realm to operate on is taken
43                  from the first principal.
44
45      list [-\b--\b-k\bke\bey\bys\bs] [-\b--\b-t\bti\bim\bme\bes\bst\bta\bam\bmp\bp]
46                  List the keys stored in the keytab.
47
48      remove [-\b-p\bp _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b--\b-p\bpr\bri\bin\bnc\bci\bip\bpa\bal\bl=\b=_\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl] [-\b-V\bV -\b-k\bkv\bvn\bno\bo] [-\b--\b-k\bkv\bvn\bno\bo=\b=_\bk_\bv_\bn_\bo]
49                  [-\b-e\be -\b-e\ben\bnc\bct\bty\byp\bpe\be] [-\b--\b-e\ben\bnc\bct\bty\byp\bpe\be=\b=_\be_\bn_\bc_\bt_\by_\bp_\be]
50                  Removes the specified key or keys. Not specifying a _\bk_\bv_\bn_\bo re-
51                  moves keys with any version number. Not specifying a _\be_\bn_\bc_\bt_\by_\bp_\be
52                  removes keys of any type.
53
54      rename _\bf_\br_\bo_\bm_\b-_\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl _\bt_\bo_\b-_\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl
55                  Renames all entries in the keytab that match the _\bf_\br_\bo_\bm_\b-
56                  _\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl to _\bt_\bo_\b-_\bp_\br_\bi_\bn_\bc_\bi_\bp_\ba_\bl.
57
58      purge [-\b--\b-a\bag\bge\be=\b=_\ba_\bg_\be]
59                  Removes all old entries (for which there is a newer version)
60                  that are older than _\ba_\bg_\be (default one week).
61
62      srvconvert
63
64      srv2keytab [-\b-s\bs _\bs_\br_\bv_\bt_\ba_\bb] [-\b--\b-s\bsr\brv\bvt\bta\bab\bb=\b=_\bs_\br_\bv_\bt_\ba_\bb]
65                  Converts the version 4 srvtab in _\bs_\br_\bv_\bt_\ba_\bb to a version 5 keytab
66                  and stores it in _\bk_\be_\by_\bt_\ba_\bb.  Identical to:
67
68                        ktutil copy krb4:_\bs_\br_\bv_\bt_\ba_\bb _\bk_\be_\by_\bt_\ba_\bb
69
70      srvcreate
71
72      key2srvtab [-\b-s\bs _\bs_\br_\bv_\bt_\ba_\bb] [-\b--\b-s\bsr\brv\bvt\bta\bab\bb=\b=_\bs_\br_\bv_\bt_\ba_\bb]
73                  Converts the version 5 keytab in _\bk_\be_\by_\bt_\ba_\bb to a version 4 srvtab
74                  and stores it in _\bs_\br_\bv_\bt_\ba_\bb.  Identical to:
75
76                        ktutil copy _\bk_\be_\by_\bt_\ba_\bb krb4:_\bs_\br_\bv_\bt_\ba_\bb
77
78 S\bSE\bEE\bE A\bAL\bLS\bSO\bO
79      kadmin(8)
80
81  HEIMDAL                       December 16, 2000                             2