Go to main content

man pages section 1: User Commands

Exit Print View

Updated: Wednesday, February 9, 2022
 
 

ktutil (1)

Name

ktutil - Kerberos keytab file maintenance utility

Synopsis

ktutil

Description

KTUTIL(1)                        MIT Kerberos                        KTUTIL(1)



NAME
       ktutil - Kerberos keytab file maintenance utility

SYNOPSIS
       ktutil

DESCRIPTION
       The  ktutil  command invokes a command interface from which an adminis-
       trator can read, write, or edit entries  in  a  keytab.   (Kerberos  V4
       srvtab files are no longer supported.)

COMMANDS
   list
          list

       Displays the current keylist.

       Alias: l

   read_kt
          read_kt keytab

       Read the Kerberos V5 keytab file keytab into the current keylist.

       Alias: rkt

   write_kt
          write_kt keytab

       Write the current keylist into the Kerberos V5 keytab file keytab.

       Alias: wkt

   clear_list
          clear_list

       Clear the current keylist.

       Alias: clear

   delete_entry
          delete_entry slot

       Delete the entry in slot number slot from the current keylist.

       Alias: delent

   add_entry
          add_entry  {-key|-password} -p principal -k kvno [-e enctype] [-f|-s
          salt]

       Add principal to keylist using key or password.   If  the  -f  flag  is
       specified,  salt information will be fetched from the KDC; in this case
       the -e flag may be omitted, or it may be supplied to force a particular
       enctype.   If  the -f flag is not specified, the -e flag must be speci-
       fied, and the default salt will be used unless overridden with  the  -s
       option.

       Alias: addent

   list_requests
          list_requests

       Displays a listing of available commands.

       Aliases: lr, ?

   quit
          quit

       Quits ktutil.

       Aliases: exit, q

EXAMPLE
              ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
                  aes128-cts-hmac-sha1-96
              Password for alice@BLEEP.COM:
              ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
                  aes256-cts-hmac-sha1-96
              Password for alice@BLEEP.COM:
              ktutil:  write_kt keytab
              ktutil:

ENVIRONMENT
       See kerberos(7) for a description of Kerberos environment variables.


ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+------------------------+
       |ATTRIBUTE TYPE |    ATTRIBUTE VALUE     |
       +---------------+------------------------+
       |Availability   | security/kerberos-5    |
       +---------------+------------------------+
       |Stability      | Pass-through committed |
       +---------------+------------------------+

SEE ALSO
       kadmin(1), kdb5_util(8), kerberos(7)

AUTHOR
       MIT

COPYRIGHT
       1985-2021, MIT



NOTES
       Source  code  for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-
       code-downloads.html.

       This     software     was    built    from    source    available    at
       https://github.com/oracle/solaris-userland.   The  original   community
       source      was      downloaded      from       http://web.mit.edu/ker-
       beros/dist/krb5/1.18/krb5-1.18.4.tar.gz.

       Further information about this software can be found on the open source
       community website at http://web.mit.edu/kerberos/.



1.18.4                                                               KTUTIL(1)