Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

ktutil(1) [suse man page]

KTUTIL(1)						      General Commands Manual							 KTUTIL(1)

NAME
ktutil - Kerberos keytab file maintenance utility SYNOPSIS
ktutil DESCRIPTION
The ktutil command invokes a subshell from which an administrator can read, write, or edit entries in a Kerberos V5 keytab or V4 srvtab file. COMMANDS
list Displays the current keylist. Alias: l. read_kt keytab Read the Kerberos V5 keytab file keytab into the current keylist. Alias: rkt read_st srvtab Read the Kerberos V4 srvtab file srvtab into the current keylist. Alias: rst. write_kt keytab Write the current keylist into the Kerberos V5 keytab file keytab. Alias: wkt. write_st srvtab Write the current keylist into the Kerberos V4 srvtab file srvtab. Alias: wst. clear_list Clear the current keylist. Alias: clear. delete_entry slot Delete the entry in slot number slot from the current keylist. Alias: delent. add_entry (-key | -password) -p principal -k kvno -e enctype Add principal to keylist using key or password. Alias: addent. list_requests Displays a listing of available commands. Aliases: lr, ?. quit Quits ktutil. Aliases: exit, q. REMARKS
Changes to the keytab are appended to the keytab file (i.e., the keytab file is never overwritten). To directly modify a keytab, save the changes to a temporary file and then overwrite the keytab file of interest. Example: ktutil> rkt /etc/krb5.keytab (modifications to keytab) ktutil> wkt /tmp/krb5.newtab ktutil> q # mv /tmp/krb5.newtab /etc/krb5.keytab SEE ALSO
kadmin(8), kdb5_util(8) KTUTIL(1)

Check Out this Related Man Page

ktutil(1)							   User Commands							 ktutil(1)

NAME
ktutil - Kerberos keytab maintenance utility SYNOPSIS
/usr/bin/ktutil DESCRIPTION
The ktutil command is an interactive command-line interface utility for managing the keylist in keytab files. You must read in a keytab's keylist before you can manage it. Also, the user running the ktutil command must have read/write permissions on the keytab. For example, if a keytab is owned by root, which it typically is, ktutil must be run as root to have the appropriate permissions. COMMANDS
clear_list Clears the current keylist. clear read_kt file Reads a keytab into the current keylist. You must specify a keytab file to read. rkt file write_kt file Writes the current keylist to a keytab file. You must specify a keytab file to write. If the keytab file already wkt file exists, the current keylist is appended to the existing keytab file. add_entry number Adds an entry to the current keylist. Specify the entry by the keylist slot number. addent number delete_entry number Deletes an entry from the current keylist. Specify the entry by the keylist slot number. delent number list Lists the current keylist. l list_request Lists available requests (commands). lr quit Exits utility. exit q EXAMPLES
Example 1 Deleting a principal from a file The following example deletes the host/denver@ACME.com principal from the /etc/krb5/krb5.keytab file. Notice that if you want to delete an entry from an existing keytab, you must first write the keylist to a temporary keytab and then overwrite the existing keytab with the tem- porary keytab. This is because the wkt command actually appends the current keylist to an existing keytab, so you can't use it to overwrite a keytab. example# /usr/krb5/bin/ktutil ktutil: rkt /etc/krb5/krb5.keytab ktutil: list slot KVNO Principal ---- ---- --------------------------------------- 1 8 host/vail@ACME.COM 2 5 host/denver@ACME.COM ktutil:delent 2 ktutil:l slot KVNO Principal ---- ---- -------------------------------------- 1 8 host/vail@ACME.COM ktutil:wkt /tmp/krb5.keytab ktutil:q example# mv /tmp/krb5.keytab /etc/krb5/krb5.keytab FILES
/etc/krb5/krb5.keytab keytab file for Kerberos clients ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWkrbu | +-----------------------------+-----------------------------+ |Interface Stability |See below. | +-----------------------------+-----------------------------+ The command arguments are Evolving. The command output is Unstable. SEE ALSO
kadmin(1M), k5srvutil(1M), attributes(5), kerberos(5) SunOS 5.11 16 Nov 2006 ktutil(1)
Man Page