System Administration Guide: Security Services

Administering Keytab Files (Task Map)

Task 

Description 

For Instructions 

Add a service principal to a keytab file. 

Use the ktadd command of kadmin to add a service principal to a keytab file.

How to Add a Kerberos Service Principal to a Keytab File

Remove a service principal from a keytab file. 

Use the ktremove command of kadmin to remove a service from a keytab file.

How to Remove a Service Principal From a Keytab File

Display the keylist (list of principals) in a keytab file. 

Use the ktutil command to display the keylist in a keytab file.

How to Display the Keylist (Principals) in a Keytab File

Temporarily disable authentication for a service on a host. 

This procedure is a quick way to temporarily disable authentication for a service on a host without requiring kadmin privileges.

Before you use ktutil to delete the service principal from the server's keytab file, copy the original keytab file to a temporary location. When you want to enable the service again, copy the original keytab file back to its proper location.

How to Temporarily Disable Authentication for a Service on a Host