1KPROPLOG(8)                      MIT Kerberos                      KPROPLOG(8)
2
3
4

NAME

6       kproplog - display the contents of the Kerberos principal update log
7

SYNOPSIS

9       kproplog [-h] [-e num] [-v] kproplog [-R]
10

DESCRIPTION

12       The  kproplog  command displays the contents of the KDC database update
13       log to standard output.  It can be used to keep  track  of  incremental
14       updates  to  the  principal database.  The update log file contains the
15       update log maintained by the kadmind process on the primary KDC  server
16       and the kpropd process on the replica KDC servers.  When updates occur,
17       they are logged to this file.  Subsequently any KDC replica  configured
18       for  incremental updates will request the current data from the primary
19       KDC and update their log file with any updates returned.
20
21       The kproplog command requires read access to the update log  file.   It
22       will display update entries only for the KDC it runs on.
23
24       If  no options are specified, kproplog displays a summary of the update
25       log.  If invoked on the primary, kproplog also displays all of the  up‐
26       date  entries.   If  invoked on a replica KDC server, kproplog displays
27       only a summary of the updates, which includes the serial number of  the
28       last update received and the associated time stamp of the last update.
29

OPTIONS

31       -R     Reset  the  update log.  This forces full resynchronization.  If
32              used on a replica then that replica will request a full  resync.
33              If  used  on  the  primary  then  all replicas will request full
34              resyncs.
35
36       -h     Display a summary of the update log.  This information  includes
37              the  database  version number, state of the database, the number
38              of updates in the log, the time stamp of the first and last  up‐
39              date, and the version number of the first and last update entry.
40
41       -e num Display  the last num update entries in the log.  This is useful
42              when debugging synchronization between KDC servers.
43
44       -v     Display individual attributes per update.   An  example  of  the
45              output generated for one entry:
46
47                 Update Entry
48                    Update serial # : 4
49                    Update operation : Add
50                    Update principal : test@EXAMPLE.COM
51                    Update size : 424
52                    Update committed : True
53                    Update time stamp : Fri Feb 20 23:37:42 2004
54                    Attributes changed : 6
55                          Principal
56                          Key data
57                          Password last changed
58                          Modifying principal
59                          Modification time
60                          TL data
61

ENVIRONMENT

63       See kerberos for a description of Kerberos environment variables.
64

SEE ALSO

66       kpropd, kerberos
67

AUTHOR

69       MIT
70

72       1985-2023, MIT
73
74
75
76
771.21                                                               KPROPLOG(8)
Impressum