How to Manually Propagate the Kerberos Database to the Slave KDCs

This procedure shows you how to propagate the Kerberos database by using the kprop command. Use this procedure if you need to synchronize a slave KDC with the master KDC outside the periodic cron job. And, unlike the kprop_script, you can use kprop to propagate just the current database backup without first making a new backup of the Kerberos database.

1. Become superuser on the master KDC.

2. (Optional) Back up the database by using the kdb5_util command.

   # /usr/sbin/kdb5_util dump /var/krb5/slave_datatrans

3. Propagate the database to a slave KDC by using the kprop command.

   # /usr/lib/krb5/kprop -f /var/krb5/slave_datatrans slave_KDC

If you want to back up the database and propagate it to a slave KDC outside the periodic cron job, you can also use the kprop_script command as follows:

# /usr/lib/krb5/kprop_script slave_KDC