DOKK / manpages / debian 10 / krb5-user / ktutil.1.en
KTUTIL(1) MIT Kerberos KTUTIL(1)

ktutil - Kerberos keytab file maintenance utility

ktutil

The ktutil command invokes a command interface from which an administrator can read, write, or edit entries in a keytab or Kerberos V4 srvtab file.

list


Displays the current keylist.

Alias: l

read_kt keytab


Read the Kerberos V5 keytab file keytab into the current keylist.

Alias: rkt

read_st srvtab


Read the Kerberos V4 srvtab file srvtab into the current keylist.

Alias: rst

write_kt keytab


Write the current keylist into the Kerberos V5 keytab file keytab.

Alias: wkt

write_st srvtab


Write the current keylist into the Kerberos V4 srvtab file srvtab.

Alias: wst

clear_list


Clear the current keylist.

Alias: clear

delete_entry slot


Delete the entry in slot number slot from the current keylist.

Alias: delent

add_entry {-key|-password} -p principal -k kvno [-e enctype] [-f|-s salt]


Add principal to keylist using key or password. If the -f flag is specified, salt information will be fetched from the KDC; in this case the -e flag may be omitted, or it may be supplied to force a particular enctype. If the -f flag is not specified, the -e flag must be specified, and the default salt will be used unless overridden with the -s option.

Alias: addent

list_requests


Displays a listing of available commands.

Aliases: lr, ?

quit


Quits ktutil.

Aliases: exit, q

ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e


    aes128-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e


    aes256-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil:  write_kt keytab
ktutil:




See kerberos(7) for a description of Kerberos environment variables.

kadmin(1), kdb5_util(8), kerberos(7)

MIT

1985-2019, MIT

1.17