1KPROPLOG(1)                 General Commands Manual                KPROPLOG(1)
2
3
4

NAME

6       kproplog - display the contents of the Kerberos principal update log
7

SYNOPSIS

9       kproplog [-h] [-e num]
10

DESCRIPTION

12       The  kproplog  command  displays the contents of the Kerberos principal
13       update log to standard output.  It can be used to  keep  track  of  the
14       incremental  updates  to  the  principal  database,  when enabled.  The
15       update log file contains the  update  log  maintained  by  the  kadmind
16       process  on  the  master KDC server and the kpropd process on the slave
17       KDC servers.  When updates occur, they are logged to this file.  Subse‐
18       quently  any  KDC slave configured for incremental updates will request
19       the current data from the master KDC and  update  their  principal.ulog
20       file with any updates returned.
21
22       The  kproplog  command  can only be run on a KDC server by someone with
23       privileges comparable to the superuser.  It will display update entries
24       for that server only.
25
26       If  no  options  are  specified,  the summary of the update log is dis‐
27       played.  If invoked on the master, all of the update entries  are  also
28       displayed.   When  invoked on a slave KDC server, only a summary of the
29       updates are displayed, which includes the serial  number  of  the  last
30       update received and the associated time stamp of the last update.
31
32

OPTIONS

34       -h     Display  a summary of the update log.  This information includes
35              the database version number, state of the database,  the  number
36              of  updates  in  the  log,  the time stamp of the first and last
37              update, and the version number of  the  first  and  last  update
38              entry.
39
40       -e num Display  the last num update entries in the log.  This is useful
41              when debugging synchronization between KDC servers.
42
43       -v     Display individual attributes per update.   An  example  of  the
44              output generated for one entry:
45               Update Entry
46                  Update serial # : 4
47                  Update operation : Add
48                  Update principal : test@EXAMPLE.COM
49                  Update size : 424
50                  Update committed : True
51                  Update time stamp : Fri Feb 20 23:37:42 2004
52                  Attributes changed : 6
53                        Principal
54                        Key data
55                        Password last changed
56                        Modifying principal
57                        Modification time
58                        TL data
59
60

SEE ALSO

62       kpropd(8)
63
64
65
66                                                                   KPROPLOG(1)
Impressum