1KPROPLOG(8)                      MIT Kerberos                      KPROPLOG(8)
2
3
4

NAME

6       kproplog - display the contents of the Kerberos principal update log
7

SYNOPSIS

9       kproplog [-h] [-e num] [-v] kproplog [-R]
10

DESCRIPTION

12       The  kproplog  command displays the contents of the KDC database update
13       log to standard output.  It can be used to keep  track  of  incremental
14       updates  to  the  principal database.  The update log file contains the
15       update log maintained by the  kadmind(8)  process  on  the  master  KDC
16       server  and  the  kpropd(8)  process  on the replica KDC servers.  When
17       updates occur, they are logged to  this  file.   Subsequently  any  KDC
18       replica  configured  for  incremental  updates will request the current
19       data from the master KDC and update their log  file  with  any  updates
20       returned.
21
22       The  kproplog  command requires read access to the update log file.  It
23       will display update entries only for the KDC it runs on.
24
25       If no options are specified, kproplog displays a summary of the  update
26       log.   If  invoked  on  the  master,  kproplog also displays all of the
27       update entries.  If invoked on a replica KDC server, kproplog  displays
28       only  a summary of the updates, which includes the serial number of the
29       last update received and the associated time stamp of the last update.
30

OPTIONS

32       -R     Reset the update log.  This forces full  resynchronization.   If
33              used  on a replica then that replica will request a full resync.
34              If used on the  master  then  all  replicas  will  request  full
35              resyncs.
36
37       -h     Display  a summary of the update log.  This information includes
38              the database version number, state of the database,  the  number
39              of  updates  in  the  log,  the time stamp of the first and last
40              update, and the version number of  the  first  and  last  update
41              entry.
42
43       -e num Display  the last num update entries in the log.  This is useful
44              when debugging synchronization between KDC servers.
45
46       -v     Display individual attributes per update.   An  example  of  the
47              output generated for one entry:
48
49                 Update Entry
50                    Update serial # : 4
51                    Update operation : Add
52                    Update principal : test@EXAMPLE.COM
53                    Update size : 424
54                    Update committed : True
55                    Update time stamp : Fri Feb 20 23:37:42 2004
56                    Attributes changed : 6
57                          Principal
58                          Key data
59                          Password last changed
60                          Modifying principal
61                          Modification time
62                          TL data
63

ENVIRONMENT

65       See kerberos(7) for a description of Kerberos environment variables.
66

SEE ALSO

68       kpropd(8), kerberos(7)
69

AUTHOR

71       MIT
72

74       1985-2019, MIT
75
76
77
78
791.17                                                               KPROPLOG(8)
Impressum