KTUTIL(1) User Commands KTUTIL(1)
NAME
ktutil - Kerberos keytab maintenance utility
SYNOPSIS
/usr/bin/ktutilDESCRIPTION
The
ktutil command is an interactive command-line interface utility for
managing the keylist in keytab files. You must read in a keytab's
keylist before you can manage it. Also, the user running the
ktutil command must have read/write permissions on the keytab. For example, if a
keytab is owned by root, which it typically is,
ktutil must be run as
root to have the appropriate permissions.
COMMANDS
clear_list clear Clears the current keylist.
read_kt file rkt file Reads a keytab into the current keylist. You must
specify a keytab
file to read.
write_kt file wkt file Writes the current keylist to a keytab
file. You
must specify a keytab file to write. If the keytab
file already exists, the current keylist is
appended to the existing keytab file.
add_entry number addent number Adds an entry to the current keylist. Specify the
entry by the keylist slot number.
delete_entry number delent number Deletes an entry from the current keylist. Specify
the entry by the keylist slot number.
list l Lists the current keylist.
list_request lr Lists available requests (commands).
quit exit q Exits utility.
EXAMPLES
Example 1: Deleting a principal from a file
The following example deletes the
host/denver@EXAMPLE.com principal from
the
/etc/krb5/krb5.keytab file. Notice that if you want to delete an
entry from an existing keytab, you must first write the keylist to a
temporary keytab and then overwrite the existing keytab with the
temporary keytab. This is because the
wkt command actually appends the
current keylist to an existing keytab, so you can't use it to overwrite a
keytab.
example#
/usr/krb5/bin/ktutil ktutil: rkt /etc/krb5/krb5.keytab
ktutil: list
slot KVNO Principal
---- ---- ---------------------------------------
1 8 host/vail@EXAMPLE.COM
2 5 host/denver@EXAMPLE.COM
ktutil:delent 2
ktutil:l
slot KVNO Principal
---- ---- --------------------------------------
1 8 host/vail@EXAMPLE.COM
ktutil:wkt /tmp/krb5.keytab
ktutil:q
example#
mv /tmp/krb5.keytab /etc/krb5/krb5.keytabFILES
/etc/krb5/krb5.keytab keytab file for Kerberos clients
ATTRIBUTES
See
attributes(7) for descriptions of the following attributes:
+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | See below. |
+--------------------+-----------------+
The command arguments are Evolving. The command output is Unstable.
SEE ALSO
attributes(7),
kerberos(7),
k5srvutil(8),
kadmin(8) November 22, 2021
KTUTIL(1)