1KTUTIL(1)                        MIT Kerberos                        KTUTIL(1)
2
3
4

NAME

6       ktutil - Kerberos keytab file maintenance utility
7

SYNOPSIS

9       ktutil
10

DESCRIPTION

12       The  ktutil  command invokes a command interface from which an adminis‐
13       trator can read, write, or edit entries  in  a  keytab.   (Kerberos  V4
14       srvtab files are no longer supported.)
15

COMMANDS

17   list
18          list [-t] [-k] [-e]
19
20       Displays the current keylist.  If -t, -k, and/or -e are specified, also
21       display the timestamp, key contents, or enctype (respectively).
22
23       Alias: l
24
25   read_kt
26          read_kt keytab
27
28       Read the Kerberos V5 keytab file keytab into the current keylist.
29
30       Alias: rkt
31
32   write_kt
33          write_kt keytab
34
35       Write the current keylist into the Kerberos V5 keytab file keytab.
36
37       Alias: wkt
38
39   clear_list
40          clear_list
41
42       Clear the current keylist.
43
44       Alias: clear
45
46   delete_entry
47          delete_entry slot
48
49       Delete the entry in slot number slot from the current keylist.
50
51       Alias: delent
52
53   add_entry
54          add_entry {-key|-password} -p principal -k kvno [-e enctype]  [-f|-s
55          salt]
56
57       Add  principal  to  keylist  using  key or password.  If the -f flag is
58       specified, salt information will be fetched from the KDC; in this  case
59       the -e flag may be omitted, or it may be supplied to force a particular
60       enctype.  If the -f flag is not specified, the -e flag must  be  speci‐
61       fied,  and  the default salt will be used unless overridden with the -s
62       option.
63
64       Alias: addent
65
66   list_requests
67          list_requests
68
69       Displays a listing of available commands.
70
71       Aliases: lr, ?
72
73   quit
74          quit
75
76       Quits ktutil.
77
78       Aliases: exit, q
79

EXAMPLE

81              ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
82                  aes128-cts-hmac-sha1-96
83              Password for alice@BLEEP.COM:
84              ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
85                  aes256-cts-hmac-sha1-96
86              Password for alice@BLEEP.COM:
87              ktutil:  write_kt alice.keytab
88              ktutil:
89

ENVIRONMENT

91       See kerberos for a description of Kerberos environment variables.
92

SEE ALSO

94       kadmin, kdb5_util, kerberos
95

AUTHOR

97       MIT
98

100       1985-2023, MIT
101
102
103
104
1051.21.2                                                               KTUTIL(1)
Impressum