Content-type: text/html Man page of ktutil

ktutil

Section: User Commands (1)
Updated: 16 Nov 2006
Index Return to Main Contents
 

NAME

ktutil - Kerberos keytab maintenance utility  

SYNOPSIS

/usr/bin/ktutil 

 

DESCRIPTION

The ktutil command is an interactive command-line interface utility for managing the keylist in keytab files. You must read in a keytab's keylist before you can manage it. Also, the user running the ktutil command must have read/write permissions on the keytab. For example, if a keytab is owned by root, which it typically is, ktutil must be run as root to have the appropriate permissions.  

COMMANDS

clear_list
clear

Clears the current keylist.

read_kt file
rkt file

Reads a keytab into the current keylist. You must specify a keytab file to read.

write_kt file
wkt file

Writes the current keylist to a keytab file. You must specify a keytab file to write. If the keytab file already exists, the current keylist is appended to the existing keytab file.

add_entry number
addent number

Adds an entry to the current keylist. Specify the entry by the keylist slot number.

delete_entry number
delent number

Deletes an entry from the current keylist. Specify the entry by the keylist slot number.

list
l

Lists the current keylist.

list_request
lr

Lists available requests (commands).

quit
exit
q

Exits utility.

 

EXAMPLES

Example 1 Deleting a principal from a file

The following example deletes the host/denver@ACME.com principal from the /etc/krb5/krb5.keytab file. Notice that if you want to delete an entry from an existing keytab, you must first write the keylist to a temporary keytab and then overwrite the existing keytab with the the temporary keytab. This is because the wkt command actually appends the current keylist to an existing keytab, so you can't use it to overwrite a keytab.

example# /usr/krb5/bin/ktutil
   ktutil: rkt /etc/krb5/krb5.keytab
   ktutil: list
slot KVNO Principal
---- ---- ---------------------------------------
  1    8 host/vail@ACME.COM
  2    5 host/denver@ACME.COM
   ktutil:delent 2
   ktutil:l
slot KVNO Principal
---- ---- --------------------------------------
  1    8 host/vail@ACME.COM
   ktutil:wkt /tmp/krb5.keytab
   ktutil:q
example# mv /tmp/krb5.keytab /etc/krb5/krb5.keytab

 

FILES

/etc/krb5/krb5.keytab

keytab file for Kerberos clients

 

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPEATTRIBUTE VALUE

AvailabilitySUNWkrbu

Interface Stability

The command arguments are Evolving. The command output is Unstable.  

SEE ALSO

kadmin(1m), k5srvutil(1m), attributes(5), kerberos(5)


 

Index

NAME
SYNOPSIS
DESCRIPTION
COMMANDS
EXAMPLES
FILES
ATTRIBUTES
SEE ALSO

This document was created by man2html, using the manual pages.
Time: 02:39:29 GMT, October 02, 2010