xref: /freebsd/crypto/krb5/src/man/ktutil.man (revision 4b15965daa99044daf184221b7c283bf7f2d7e66)
Man page generated from reStructuredText.
. . .nr rst2man-indent-level 0 . \\$1 \\n[an-margin] level \\n[rst2man-indent-level] level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] - \\n[rst2man-indent0] \\n[rst2man-indent1] \\n[rst2man-indent2] .. .rstReportMargin pre:
. RS \\$1 . nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin] . nr rst2man-indent-level +1 .rstReportMargin post:
.. . RE indent \\n[an-margin]
old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1 new: \\n[rst2man-indent\\n[rst2man-indent-level]]
..
"KTUTIL" "1" " " "1.21.3" "MIT Kerberos"
NAME
ktutil - Kerberos keytab file maintenance utility
SYNOPSIS
ktutil
DESCRIPTION
The ktutil command invokes a command interface from which an administrator can read, write, or edit entries in a keytab. (Kerberos V4 srvtab files are no longer supported.)
COMMANDS
list
NDENT 0.0 NDENT 3.5 list [-t] [-k] [-e] NINDENT NINDENT Displays the current keylist. If -t, -k, and/or -e are specified, also display the timestamp, key contents, or enctype (respectively). Alias: l
read_kt
NDENT 0.0 NDENT 3.5 read_kt keytab NINDENT NINDENT Read the Kerberos V5 keytab file keytab into the current keylist. Alias: rkt
write_kt
NDENT 0.0 NDENT 3.5 write_kt keytab NINDENT NINDENT Write the current keylist into the Kerberos V5 keytab file keytab. Alias: wkt
clear_list
NDENT 0.0 NDENT 3.5 clear_list NINDENT NINDENT Clear the current keylist. Alias: clear
delete_entry
NDENT 0.0 NDENT 3.5 delete_entry slot NINDENT NINDENT Delete the entry in slot number slot from the current keylist. Alias: delent
add_entry
NDENT 0.0 NDENT 3.5 add_entry {-key|-password} -p principal -k kvno [-e enctype] [-f|-s salt] NINDENT NINDENT Add principal to keylist using key or password. If the -f flag is specified, salt information will be fetched from the KDC; in this case the -e flag may be omitted, or it may be supplied to force a particular enctype. If the -f flag is not specified, the -e flag must be specified, and the default salt will be used unless overridden with the -s option. Alias: addent
list_requests
NDENT 0.0 NDENT 3.5 list_requests NINDENT NINDENT Displays a listing of available commands. Aliases: lr, ?
quit
NDENT 0.0 NDENT 3.5 quit NINDENT NINDENT Quits ktutil. Aliases: exit, q
EXAMPLE
NDENT 0.0 NDENT 3.5 NDENT 0.0 NDENT 3.5
ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
 aes128-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
 aes256-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil: write_kt alice.keytab
ktutil:
NINDENT NINDENT NINDENT NINDENT
ENVIRONMENT
See kerberos(7) for a description of Kerberos environment variables.
SEE ALSO
kadmin(1), kdb5_util(8), kerberos(7)
AUTHOR
MIT
COPYRIGHT
1985-2024, MIT Generated by docutils manpage writer.
.