1KPROPLOG(8)                      MIT Kerberos                      KPROPLOG(8)
2
3
4

NAME

6       kproplog - display the contents of the Kerberos principal update log
7

SYNOPSIS

9       kproplog [-h] [-e num] [-v] kproplog [-R]
10

DESCRIPTION

12       The  kproplog  command displays the contents of the KDC database update
13       log to standard output.  It can be used to keep  track  of  incremental
14       updates  to  the  principal database.  The update log file contains the
15       update log maintained by the kadmind(8)  process  on  the  primary  KDC
16       server  and the kpropd(8) process on the replica KDC servers.  When up‐
17       dates occur, they are  logged  to  this  file.   Subsequently  any  KDC
18       replica  configured  for  incremental  updates will request the current
19       data from the primary KDC and update their log file  with  any  updates
20       returned.
21
22       The  kproplog  command requires read access to the update log file.  It
23       will display update entries only for the KDC it runs on.
24
25       If no options are specified, kproplog displays a summary of the  update
26       log.   If invoked on the primary, kproplog also displays all of the up‐
27       date entries.  If invoked on a replica KDC  server,  kproplog  displays
28       only  a summary of the updates, which includes the serial number of the
29       last update received and the associated time stamp of the last update.
30

OPTIONS

32       -R     Reset the update log.  This forces full  resynchronization.   If
33              used  on a replica then that replica will request a full resync.
34              If used on the primary  then  all  replicas  will  request  full
35              resyncs.
36
37       -h     Display  a summary of the update log.  This information includes
38              the database version number, state of the database,  the  number
39              of  updates in the log, the time stamp of the first and last up‐
40              date, and the version number of the first and last update entry.
41
42       -e num Display the last num update entries in the log.  This is  useful
43              when debugging synchronization between KDC servers.
44
45       -v     Display  individual  attributes  per  update.  An example of the
46              output generated for one entry:
47
48                 Update Entry
49                    Update serial # : 4
50                    Update operation : Add
51                    Update principal : test@EXAMPLE.COM
52                    Update size : 424
53                    Update committed : True
54                    Update time stamp : Fri Feb 20 23:37:42 2004
55                    Attributes changed : 6
56                          Principal
57                          Key data
58                          Password last changed
59                          Modifying principal
60                          Modification time
61                          TL data
62

ENVIRONMENT

64       See kerberos(7) for a description of Kerberos environment variables.
65

SEE ALSO

67       kpropd(8), kerberos(7)
68

AUTHOR

70       MIT
71

73       1985-2021, MIT
74
75
76
77
781.19.2                                                             KPROPLOG(8)
Impressum