xref: /freebsd/crypto/krb5/src/man/kproplog.man (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9)
Man page generated from reStructuredText.
. . .nr rst2man-indent-level 0 . \\$1 \\n[an-margin] level \\n[rst2man-indent-level] level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] - \\n[rst2man-indent0] \\n[rst2man-indent1] \\n[rst2man-indent2] .. .rstReportMargin pre:
. RS \\$1 . nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin] . nr rst2man-indent-level +1 .rstReportMargin post:
.. . RE indent \\n[an-margin]
old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1 new: \\n[rst2man-indent\\n[rst2man-indent-level]]
..
"KPROPLOG" "8" " " "1.21.3" "MIT Kerberos"
NAME
kproplog - display the contents of the Kerberos principal update log
SYNOPSIS
kproplog [-h] [-e num] [-v] kproplog [-R]
DESCRIPTION
The kproplog command displays the contents of the KDC database update log to standard output. It can be used to keep track of incremental updates to the principal database. The update log file contains the update log maintained by the kadmind(8) process on the primary KDC server and the kpropd(8) process on the replica KDC servers. When updates occur, they are logged to this file. Subsequently any KDC replica configured for incremental updates will request the current data from the primary KDC and update their log file with any updates returned. The kproplog command requires read access to the update log file. It will display update entries only for the KDC it runs on. If no options are specified, kproplog displays a summary of the update log. If invoked on the primary, kproplog also displays all of the update entries. If invoked on a replica KDC server, kproplog displays only a summary of the updates, which includes the serial number of the last update received and the associated time stamp of the last update.
OPTIONS
NDENT 0.0

-R Reset the update log. This forces full resynchronization. If used on a replica then that replica will request a full resync. If used on the primary then all replicas will request full resyncs.

-h Display a summary of the update log. This information includes the database version number, state of the database, the number of updates in the log, the time stamp of the first and last update, and the version number of the first and last update entry.

-e num Display the last num update entries in the log. This is useful when debugging synchronization between KDC servers.

-v Display individual attributes per update. An example of the output generated for one entry: NDENT 7.0 NDENT 3.5

Update Entry
 Update serial # : 4
 Update operation : Add
 Update principal : test@EXAMPLE.COM
 Update size : 424
 Update committed : True
 Update time stamp : Fri Feb 20 23:37:42 2004
 Attributes changed : 6
 Principal
 Key data
 Password last changed
 Modifying principal
 Modification time
 TL data
NINDENT NINDENT NINDENT
ENVIRONMENT
See kerberos(7) for a description of Kerberos environment variables.
SEE ALSO
kpropd(8), kerberos(7)
AUTHOR
MIT
COPYRIGHT
1985-2024, MIT Generated by docutils manpage writer.
.