KTUTIL(1) User Commands KTUTIL(1)

NAME

ktutil - Kerberos keytab maintenance utility

SYNOPSIS

/usr/bin/ktutil

DESCRIPTION

The ktutil command is an interactive command-line interface utility
for managing the keylist in keytab files. You must read in a
keytab's keylist before you can manage it. Also, the user running the
ktutil command must have read/write permissions on the keytab. For
example, if a keytab is owned by root, which it typically is, ktutil
must be run as root to have the appropriate permissions.

COMMANDS

clear_list
clear
Clears the current keylist.


read_kt file
rkt file
Reads a keytab into the current keylist. You
must specify a keytab file to read.


write_kt file
wkt file
Writes the current keylist to a keytab file.
You must specify a keytab file to write. If
the keytab file already exists, the current
keylist is appended to the existing keytab
file.


add_entry number
addent number
Adds an entry to the current keylist. Specify
the entry by the keylist slot number.


delete_entry number
delent number
Deletes an entry from the current keylist.
Specify the entry by the keylist slot number.


list
l
Lists the current keylist.


list_request
lr
Lists available requests (commands).


quit
exit
q
Exits utility.

EXAMPLES

Example 1: Deleting a principal from a file

The following example deletes the host/denver@EXAMPLE.com principal
from the /etc/krb5/krb5.keytab file. Notice that if you want to
delete an entry from an existing keytab, you must first write the
keylist to a temporary keytab and then overwrite the existing keytab
with the temporary keytab. This is because the wkt command actually
appends the current keylist to an existing keytab, so you can't use
it to overwrite a keytab.


example# /usr/krb5/bin/ktutil
ktutil: rkt /etc/krb5/krb5.keytab
ktutil: list
slot KVNO Principal
---- ---- ---------------------------------------
1 8 host/vail@EXAMPLE.COM
2 5 host/denver@EXAMPLE.COM
ktutil:delent 2
ktutil:l
slot KVNO Principal
---- ---- --------------------------------------
1 8 host/vail@EXAMPLE.COM
ktutil:wkt /tmp/krb5.keytab
ktutil:q
example# mv /tmp/krb5.keytab /etc/krb5/krb5.keytab

FILES

/etc/krb5/krb5.keytab
keytab file for Kerberos clients

ATTRIBUTES

See attributes(7) for descriptions of the following attributes:


+--------------------+-----------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+--------------------+-----------------+
|Interface Stability | See below. |
+--------------------+-----------------+


The command arguments are Evolving. The command output is Unstable.

SEE ALSO

attributes(7), kerberos(7), k5srvutil(8), kadmin(8)

November 22, 2021 KTUTIL(1)