KTUTIL(8) NetBSD System Manager's Manual KTUTIL(8) NNAAMMEE kkttuuttiill - manage Kerberos keytabs SSYYNNOOPPSSIISS kkttuuttiill [--kk _k_e_y_t_a_b | ----kkeeyyttaabb==_k_e_y_t_a_b] [--vv | ----vveerrbboossee] [----vveerrssiioonn] [--hh | ----hheellpp] _c_o_m_m_a_n_d [_a_r_g_s] DDEESSCCRRIIPPTTIIOONN kkttuuttiill is a program for managing keytabs. _c_o_m_m_a_n_d can be one of the fol- lowing: add [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV _k_v_n_o] [----kkvvnnoo==_k_v_n_o] [--ee _e_n_c_y_p_e] [----eennccttyyppee==_e_n_c_t_y_p_e] [--ww _p_a_s_s_w_o_r_d] [----ppaasssswwoorrdd==_p_a_s_s_w_o_r_d] [--rr] [----rraannddoomm] [--ss] [----nnoo--ssaalltt] Adds a key to the keytab. Options that are not specified will be prompted for. This requires that you know the password of the principal to add; if what you really want is to add a new principal to the keytab, you should consider the _g_e_t command, which talks to the kadmin server. change [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [----aa _h_o_s_t] [----aaddmmiinn--sseerrvveerr==_h_o_s_t] [----ss _p_o_r_t] [----sseerrvveerr--ppoorrtt==_p_o_r_t] Update one or several keys to new versions. By default, use the admin server for the realm of an keytab entry. Otherwise it will use the values specified by the options. If no principals are given, all the ones in the keytab are updated. copy _k_e_y_t_a_b_-_s_r_c _k_e_y_t_a_b_-_d_e_s_t Copies all the entries from _k_e_y_t_a_b_-_s_r_c to _k_e_y_t_a_b_-_d_e_s_t. get [--pp _a_d_m_i_n _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_a_d_m_i_n _p_r_i_n_c_i_p_a_l] [--ee _e_n_c_t_y_p_e] [----eennccttyyppeess==_e_n_c_t_y_p_e] [--rr _r_e_a_l_m] [----rreeaallmm==_r_e_a_l_m] [--aa _a_d_m_i_n _s_e_r_v_e_r] [----aaddmmiinn--sseerrvveerr==_a_d_m_i_n _s_e_r_v_e_r] [--ss _s_e_r_v_e_r _p_o_r_t] [----sseerrvveerr--ppoorrtt==_s_e_r_v_e_r _p_o_r_t] _p_r_i_n_c_i_p_a_l _._._. For each _p_r_i_n_c_i_p_a_l, generate a new key for it (creating it if it doesn't already exist), and put that key in the keytab. If no _r_e_a_l_m is specified, the realm to operate on is taken from the first principal. list [----kkeeyyss] [----ttiimmeessttaammpp] List the keys stored in the keytab. remove [--pp _p_r_i_n_c_i_p_a_l] [----pprriinncciippaall==_p_r_i_n_c_i_p_a_l] [--VV --kkvvnnoo] [----kkvvnnoo==_k_v_n_o] [--ee --eennccttyyppee] [----eennccttyyppee==_e_n_c_t_y_p_e] Removes the specified key or keys. Not specifying a _k_v_n_o re- moves keys with any version number. Not specifying a _e_n_c_t_y_p_e removes keys of any type. rename _f_r_o_m_-_p_r_i_n_c_i_p_a_l _t_o_-_p_r_i_n_c_i_p_a_l Renames all entries in the keytab that match the _f_r_o_m_- _p_r_i_n_c_i_p_a_l to _t_o_-_p_r_i_n_c_i_p_a_l. purge [----aaggee==_a_g_e] Removes all old entries (for which there is a newer version) that are older than _a_g_e (default one week). srvconvert srv2keytab [--ss _s_r_v_t_a_b] [----ssrrvvttaabb==_s_r_v_t_a_b] Converts the version 4 srvtab in _s_r_v_t_a_b to a version 5 keytab and stores it in _k_e_y_t_a_b. Identical to: ktutil copy krb4:_s_r_v_t_a_b _k_e_y_t_a_b srvcreate key2srvtab [--ss _s_r_v_t_a_b] [----ssrrvvttaabb==_s_r_v_t_a_b] Converts the version 5 keytab in _k_e_y_t_a_b to a version 4 srvtab and stores it in _s_r_v_t_a_b. Identical to: ktutil copy _k_e_y_t_a_b krb4:_s_r_v_t_a_b SSEEEE AALLSSOO kadmin(8) HEIMDAL December 16, 2000 2