xref: /freebsd/crypto/krb5/doc/admin/admin_commands/kproplog.rst (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9)
1*7f2fe78bSCy Schubert.. _kproplog(8):
2*7f2fe78bSCy Schubert
3*7f2fe78bSCy Schubertkproplog
4*7f2fe78bSCy Schubert========
5*7f2fe78bSCy Schubert
6*7f2fe78bSCy SchubertSYNOPSIS
7*7f2fe78bSCy Schubert--------
8*7f2fe78bSCy Schubert
9*7f2fe78bSCy Schubert**kproplog** [**-h**] [**-e** *num*] [-v]
10*7f2fe78bSCy Schubert**kproplog** [-R]
11*7f2fe78bSCy Schubert
12*7f2fe78bSCy Schubert
13*7f2fe78bSCy SchubertDESCRIPTION
14*7f2fe78bSCy Schubert-----------
15*7f2fe78bSCy Schubert
16*7f2fe78bSCy SchubertThe kproplog command displays the contents of the KDC database update
17*7f2fe78bSCy Schubertlog to standard output.  It can be used to keep track of incremental
18*7f2fe78bSCy Schubertupdates to the principal database.  The update log file contains the
19*7f2fe78bSCy Schubertupdate log maintained by the :ref:`kadmind(8)` process on the primary
20*7f2fe78bSCy SchubertKDC server and the :ref:`kpropd(8)` process on the replica KDC
21*7f2fe78bSCy Schubertservers.  When updates occur, they are logged to this file.
22*7f2fe78bSCy SchubertSubsequently any KDC replica configured for incremental updates will
23*7f2fe78bSCy Schubertrequest the current data from the primary KDC and update their log
24*7f2fe78bSCy Schubertfile with any updates returned.
25*7f2fe78bSCy Schubert
26*7f2fe78bSCy SchubertThe kproplog command requires read access to the update log file.  It
27*7f2fe78bSCy Schubertwill display update entries only for the KDC it runs on.
28*7f2fe78bSCy Schubert
29*7f2fe78bSCy SchubertIf no options are specified, kproplog displays a summary of the update
30*7f2fe78bSCy Schubertlog.  If invoked on the primary, kproplog also displays all of the
31*7f2fe78bSCy Schubertupdate entries.  If invoked on a replica KDC server, kproplog displays
32*7f2fe78bSCy Schubertonly a summary of the updates, which includes the serial number of the
33*7f2fe78bSCy Schubertlast update received and the associated time stamp of the last update.
34*7f2fe78bSCy Schubert
35*7f2fe78bSCy Schubert
36*7f2fe78bSCy SchubertOPTIONS
37*7f2fe78bSCy Schubert-------
38*7f2fe78bSCy Schubert
39*7f2fe78bSCy Schubert**-R**
40*7f2fe78bSCy Schubert    Reset the update log.  This forces full resynchronization.  If
41*7f2fe78bSCy Schubert    used on a replica then that replica will request a full resync.
42*7f2fe78bSCy Schubert    If used on the primary then all replicas will request full
43*7f2fe78bSCy Schubert    resyncs.
44*7f2fe78bSCy Schubert
45*7f2fe78bSCy Schubert**-h**
46*7f2fe78bSCy Schubert    Display a summary of the update log.  This information includes
47*7f2fe78bSCy Schubert    the database version number, state of the database, the number of
48*7f2fe78bSCy Schubert    updates in the log, the time stamp of the first and last update,
49*7f2fe78bSCy Schubert    and the version number of the first and last update entry.
50*7f2fe78bSCy Schubert
51*7f2fe78bSCy Schubert**-e** *num*
52*7f2fe78bSCy Schubert    Display the last *num* update entries in the log.  This is useful
53*7f2fe78bSCy Schubert    when debugging synchronization between KDC servers.
54*7f2fe78bSCy Schubert
55*7f2fe78bSCy Schubert**-v**
56*7f2fe78bSCy Schubert    Display individual attributes per update.  An example of the
57*7f2fe78bSCy Schubert    output generated for one entry::
58*7f2fe78bSCy Schubert
59*7f2fe78bSCy Schubert        Update Entry
60*7f2fe78bSCy Schubert           Update serial # : 4
61*7f2fe78bSCy Schubert           Update operation : Add
62*7f2fe78bSCy Schubert           Update principal : test@EXAMPLE.COM
63*7f2fe78bSCy Schubert           Update size : 424
64*7f2fe78bSCy Schubert           Update committed : True
65*7f2fe78bSCy Schubert           Update time stamp : Fri Feb 20 23:37:42 2004
66*7f2fe78bSCy Schubert           Attributes changed : 6
67*7f2fe78bSCy Schubert                 Principal
68*7f2fe78bSCy Schubert                 Key data
69*7f2fe78bSCy Schubert                 Password last changed
70*7f2fe78bSCy Schubert                 Modifying principal
71*7f2fe78bSCy Schubert                 Modification time
72*7f2fe78bSCy Schubert                 TL data
73*7f2fe78bSCy Schubert
74*7f2fe78bSCy Schubert
75*7f2fe78bSCy SchubertENVIRONMENT
76*7f2fe78bSCy Schubert-----------
77*7f2fe78bSCy Schubert
78*7f2fe78bSCy SchubertSee :ref:`kerberos(7)` for a description of Kerberos environment
79*7f2fe78bSCy Schubertvariables.
80*7f2fe78bSCy Schubert
81*7f2fe78bSCy Schubert
82*7f2fe78bSCy SchubertSEE ALSO
83*7f2fe78bSCy Schubert--------
84*7f2fe78bSCy Schubert
85*7f2fe78bSCy Schubert:ref:`kpropd(8)`, :ref:`kerberos(7)`
86