Go to main content

man pages section 8: System Administration Commands

Exit Print View

Updated: Thursday, June 13, 2019
 
 

kproplog (8)

Name

kproplog - display the contents of the Kerberos principal update log

Synopsis

kproplog [-h] [-e num] [-v] kproplog [-R]

Description

KPROPLOG(8)                      MIT Kerberos                      KPROPLOG(8)



NAME
       kproplog - display the contents of the Kerberos principal update log

SYNOPSIS
       kproplog [-h] [-e num] [-v] kproplog [-R]

DESCRIPTION
       The  kproplog  command displays the contents of the KDC database update
       log to standard output.  It can be used to keep  track  of  incremental
       updates  to  the  principal database.  The update log file contains the
       update log maintained by the  kadmind(8)  process  on  the  master  KDC
       server  and  the  kpropd(8)  process  on  the  slave KDC servers.  When
       updates occur, they are logged to  this  file.   Subsequently  any  KDC
       slave  configured for incremental updates will request the current data
       from the master  KDC  and  update  their  log  file  with  any  updates
       returned.

       The  kproplog  command requires read access to the update log file.  It
       will display update entries only for the KDC it runs on.

       If no options are specified, kproplog displays a summary of the  update
       log.   If  invoked  on  the  master,  kproplog also displays all of the
       update entries.  If invoked on a slave KDC  server,  kproplog  displays
       only  a summary of the updates, which includes the serial number of the
       last update received and the associated time stamp of the last update.

OPTIONS
       -R     Reset the update log.  This forces full  resynchronization.   If
              used  on a slave then that slave will request a full resync.  If
              used on the master then all slaves will request full resyncs.

       -h     Display a summary of the update log.  This information  includes
              the  database  version number, state of the database, the number
              of updates in the log, the time stamp  of  the  first  and  last
              update,  and  the  version  number  of the first and last update
              entry.

       -e num Display the last num update entries in the log.  This is  useful
              when debugging synchronization between KDC servers.

       -v     Display  individual  attributes  per  update.  An example of the
              output generated for one entry:

                 Update Entry
                    Update serial # : 4
                    Update operation : Add
                    Update principal : test@EXAMPLE.COM
                    Update size : 424
                    Update committed : True
                    Update time stamp : Fri Feb 20 23:37:42 2004
                    Attributes changed : 6
                          Principal
                          Key data
                          Password last changed
                          Modifying principal
                          Modification time
                          TL data

ENVIRONMENT
       kproplog uses the following environment variables:

       o KRB5_KDC_PROFILE


ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+-------------------------+
       |ATTRIBUTE TYPE |    ATTRIBUTE VALUE      |
       +---------------+-------------------------+
       |Availability   | security/kerberos-5/kdc |
       +---------------+-------------------------+
       |Stability      | Pass-through committed  |
       +---------------+-------------------------+
SEE ALSO
       kpropd(8)

AUTHOR
       MIT

COPYRIGHT
       1985-2018, MIT



NOTES
       This    software    was    built    from    source     available     at
       https://github.com/oracle/solaris-userland.    The  original  community
       source     was      downloaded      from       https://web.mit.edu/ker-
       beros/dist/krb5/1.16/krb5-1.16.1.tar.gz

       Further information about this software can be found on the open source
       community website at https://web.mit.edu/kerberos/.



1.16.1                                                             KPROPLOG(8)