jpayne@68: .\" Man page generated from reStructuredText.
jpayne@68: .
jpayne@68: .TH "KTUTIL" "1" " " "1.20.1" "MIT Kerberos"
jpayne@68: .SH NAME
jpayne@68: ktutil \- Kerberos keytab file maintenance utility
jpayne@68: .
jpayne@68: .nr rst2man-indent-level 0
jpayne@68: .
jpayne@68: .de1 rstReportMargin
jpayne@68: \\$1 \\n[an-margin]
jpayne@68: level \\n[rst2man-indent-level]
jpayne@68: level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
jpayne@68: -
jpayne@68: \\n[rst2man-indent0]
jpayne@68: \\n[rst2man-indent1]
jpayne@68: \\n[rst2man-indent2]
jpayne@68: ..
jpayne@68: .de1 INDENT
jpayne@68: .\" .rstReportMargin pre:
jpayne@68: . RS \\$1
jpayne@68: . nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
jpayne@68: . nr rst2man-indent-level +1
jpayne@68: .\" .rstReportMargin post:
jpayne@68: ..
jpayne@68: .de UNINDENT
jpayne@68: . RE
jpayne@68: .\" indent \\n[an-margin]
jpayne@68: .\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
jpayne@68: .nr rst2man-indent-level -1
jpayne@68: .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
jpayne@68: .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
jpayne@68: ..
jpayne@68: .SH SYNOPSIS
jpayne@68: .sp
jpayne@68: \fBktutil\fP
jpayne@68: .SH DESCRIPTION
jpayne@68: .sp
jpayne@68: The ktutil command invokes a command interface from which an
jpayne@68: administrator can read, write, or edit entries in a keytab.  (Kerberos
jpayne@68: V4 srvtab files are no longer supported.)
jpayne@68: .SH COMMANDS
jpayne@68: .SS list
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBlist\fP [\fB\-t\fP] [\fB\-k\fP] [\fB\-e\fP]
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Displays the current keylist.  If \fB\-t\fP, \fB\-k\fP, and/or \fB\-e\fP are
jpayne@68: specified, also display the timestamp, key contents, or enctype
jpayne@68: (respectively).
jpayne@68: .sp
jpayne@68: Alias: \fBl\fP
jpayne@68: .SS read_kt
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBread_kt\fP \fIkeytab\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Read the Kerberos V5 keytab file \fIkeytab\fP into the current keylist.
jpayne@68: .sp
jpayne@68: Alias: \fBrkt\fP
jpayne@68: .SS write_kt
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBwrite_kt\fP \fIkeytab\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Write the current keylist into the Kerberos V5 keytab file \fIkeytab\fP\&.
jpayne@68: .sp
jpayne@68: Alias: \fBwkt\fP
jpayne@68: .SS clear_list
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBclear_list\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Clear the current keylist.
jpayne@68: .sp
jpayne@68: Alias: \fBclear\fP
jpayne@68: .SS delete_entry
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBdelete_entry\fP \fIslot\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Delete the entry in slot number \fIslot\fP from the current keylist.
jpayne@68: .sp
jpayne@68: Alias: \fBdelent\fP
jpayne@68: .SS add_entry
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBadd_entry\fP {\fB\-key\fP|\fB\-password\fP} \fB\-p\fP \fIprincipal\fP
jpayne@68: \fB\-k\fP \fIkvno\fP [\fB\-e\fP \fIenctype\fP] [\fB\-f\fP|\fB\-s\fP \fIsalt\fP]
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Add \fIprincipal\fP to keylist using key or password.  If the \fB\-f\fP flag
jpayne@68: is specified, salt information will be fetched from the KDC; in this
jpayne@68: case the \fB\-e\fP flag may be omitted, or it may be supplied to force a
jpayne@68: particular enctype.  If the \fB\-f\fP flag is not specified, the \fB\-e\fP
jpayne@68: flag must be specified, and the default salt will be used unless
jpayne@68: overridden with the \fB\-s\fP option.
jpayne@68: .sp
jpayne@68: Alias: \fBaddent\fP
jpayne@68: .SS list_requests
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBlist_requests\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Displays a listing of available commands.
jpayne@68: .sp
jpayne@68: Aliases: \fBlr\fP, \fB?\fP
jpayne@68: .SS quit
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: \fBquit\fP
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .sp
jpayne@68: Quits ktutil.
jpayne@68: .sp
jpayne@68: Aliases: \fBexit\fP, \fBq\fP
jpayne@68: .SH EXAMPLE
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: .INDENT 0.0
jpayne@68: .INDENT 3.5
jpayne@68: .sp
jpayne@68: .nf
jpayne@68: .ft C
jpayne@68: ktutil:  add_entry \-password \-p alice@BLEEP.COM \-k 1 \-e
jpayne@68:     aes128\-cts\-hmac\-sha1\-96
jpayne@68: Password for alice@BLEEP.COM:
jpayne@68: ktutil:  add_entry \-password \-p alice@BLEEP.COM \-k 1 \-e
jpayne@68:     aes256\-cts\-hmac\-sha1\-96
jpayne@68: Password for alice@BLEEP.COM:
jpayne@68: ktutil:  write_kt alice.keytab
jpayne@68: ktutil:
jpayne@68: .ft P
jpayne@68: .fi
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .UNINDENT
jpayne@68: .SH ENVIRONMENT
jpayne@68: .sp
jpayne@68: See kerberos(7) for a description of Kerberos environment
jpayne@68: variables.
jpayne@68: .SH SEE ALSO
jpayne@68: .sp
jpayne@68: kadmin(1), kdb5_util(8), kerberos(7)
jpayne@68: .SH AUTHOR
jpayne@68: MIT
jpayne@68: .SH COPYRIGHT
jpayne@68: 1985-2022, MIT
jpayne@68: .\" Generated by docutils manpage writer.
jpayne@68: .