kproplog(1M)						  System Administration Commands					      kproplog(1M)

NAME

       kproplog - display the contents of the Kerberos principal update log

SYNOPSIS

       /usr/sbin/kproplog [-h | -e num]

DESCRIPTION

       The  kproplog  displays the contents of the Kerberos principal update log to standard output. This command can be used to keep track of the
       incremental updates to the principal database, which is enabled by default. The /var/krb5/principal.ulog file contains the update log main-
       tained  by  the	kadmind(1M) process on the master KDC server and the kpropd(1M) process on the slave KDC servers. When updates occur, they
       are logged to this file. Subsequently any KDC slave configured for incremental updates will request the current data from  the  master  KDC
       and update their principal.ulog file with any updates returned.

       The kproplog command can only be run on a KDC server by someone with privileges comparable to the superuser. It will display update entries
       for that server only.

       If no options are specified, the summary of the update log is displayed. If invoked on the master, all of the update entries are also  dis-
       played.	When  invoked  on  a  slave  KDC server, only a summary of the updates are displayed, which includes the serial number of the last
       update received and the associated time stamp of the last update.

OPTIONS

       The following options are supported:

       -h

	   Display a summary of the update log. This information includes the database version number,	state  of  the	database,  the	number	of
	   updates in the log, the time stamp of the first and last update, and the version number of the first and last update entry.

       -e num

	   Display the last num update entries in the log. This is useful when debugging synchronization between KDC servers.

       -v

	   Display individual attributes per update. An example of the output generated for one entry:

	   Update Entry
	       Update serial # : 4
	       Update operation : Add
	       Update principal : test@EXAMPLE.COM
	       Update size : 424
	       Update committed : True
	       Update time stamp : Fri Feb 20 23:37:42 2004
	       Attributes changed : 6
		     Principal
		     Key data
		     Password last changed
		     Modifying principal
		     Modification time
		     TL data

FILES

       /var/krb5/principal.ulog

	   The update log file for incremental propagation.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWkdcu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Evolving			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       kpasswd(1), gkadmin(1M), kadmin(1M), kadmind(1M), kdb5_util(1M), kprop(1M), kpropd(1M), kadm5.acl(4), kdc.conf(4), attributes(5), SEAM(5)

SunOS 5.10							    29 Mar 2004 						      kproplog(1M)