KTUTIL(8)               OpenBSD System Manager's Manual              KTUTIL(8)

NAME
     ktutil - manage Kerberos keytabs

SYNOPSIS
     ktutil [-k keytab | --keytab=keytab] [-v | --verbose] [--version] [-h |
     --help] command [args]

DESCRIPTION
     ktutil is a program for managing keytabs.  command can be one of the fol-
     lowing:

     add [-p principal] [--principal=principal] [-V kvno] [--kvno=kvno] [-e
             encype] [--enctype=enctype] [-w password] [--password=password]
             [-r] [--random] [-s] [--no-salt]
             Adds a key to the keytab. Options that are not specified will be
             prompted for.

     change [-r realm] [--realm=realm] [--a host] [--admin-server=host] [--s
             port] [--server-port=port]
             Update one or several keys to new versions.  By default, use the
             admin server for the realm of an keytab entry.  Otherwise it will
             use the values specified by the options.

             If no principals are given, all the ones in the keytab are updat-
             ed.

     copy keytab-src keytab-dest
             Copies all the entries from keytab-src to keytab-dest.

     get [-p admin principal] [--principal=admin principal] [-e enctype |
             --enctypes=enctype
             server=admin server] [-s server port] [--server-port=server port]
             principal ][-r   realm]   [--realm=realm]   [-a   admin   server]
             [--admin- Get a key for principal and store it in a keytab.

     list [--keys] [--timestamp]
             List the keys stored in the keytab.

     remove [-p principal] [--principal=principal] [-V -kvno] [--kvno=kvno]
             [-e -enctype] [--enctype=enctype]
             Removes the specified key or keys. Not specifying a kvno removes
             keys with any version number. Not specifying a enctype removes
             keys of any type.

     purge [--age=age]
             Removes all old entries (for which there is a newer version) that
             are older than age (default one week).

     srvconvert

     srv2keytab [-s srvtab] [--srvtab=srvtab]
             Converts the version 4 srvtab in srvtab to a version 5 keytab and
             stores it in keytab. Identical to:

                   ktutil copy krb4:srvtab keytab

     srvcreate

     key2srvtab [-s srvtab] [--srvtab=srvtab]
             Converts the version 5 keytab in keytab to a version 4 srvtab and
             stores it in srvtab. Identical to:

                   ktutil copy keytab krb4:srvtab

SEE ALSO
     kadmin(8)

 HEIMDAL                       December 16, 2000                             2
