summaryrefslogtreecommitdiff
path: root/doc/html/admin/admin_commands/ktutil.html
diff options
context:
space:
mode:
authorCy Schubert <cy@FreeBSD.org>2023-08-04 17:53:10 +0000
committerCy Schubert <cy@FreeBSD.org>2023-08-04 17:53:10 +0000
commit0320e0d5bb9fbb5da53478b3fd80ad79b110191d (patch)
treee1185f75bd2d3f87b0c17f787debc3ee8648214b /doc/html/admin/admin_commands/ktutil.html
parentb0e4d68d5124581ae353493d69bea352de4cff8a (diff)
vendor/krb5/1.21.1
Diffstat (limited to 'doc/html/admin/admin_commands/ktutil.html')
-rw-r--r--doc/html/admin/admin_commands/ktutil.html86
1 files changed, 42 insertions, 44 deletions
diff --git a/doc/html/admin/admin_commands/ktutil.html b/doc/html/admin/admin_commands/ktutil.html
index ba95ebbe71ff..03d052c15b88 100644
--- a/doc/html/admin/admin_commands/ktutil.html
+++ b/doc/html/admin/admin_commands/ktutil.html
@@ -1,33 +1,31 @@
+
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-
- <title>ktutil &mdash; MIT Kerberos Documentation</title>
-
+ <title>ktutil &#8212; MIT Kerberos Documentation</title>
<link rel="stylesheet" href="../../_static/agogo.css" type="text/css" />
<link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
<link rel="stylesheet" href="../../_static/kerb.css" type="text/css" />
-
<script type="text/javascript">
var DOCUMENTATION_OPTIONS = {
URL_ROOT: '../../',
- VERSION: '1.16',
+ VERSION: '1.21.1',
COLLAPSE_INDEX: false,
FILE_SUFFIX: '.html',
- HAS_SOURCE: true
+ HAS_SOURCE: true,
+ SOURCELINK_SUFFIX: '.txt'
};
</script>
<script type="text/javascript" src="../../_static/jquery.js"></script>
<script type="text/javascript" src="../../_static/underscore.js"></script>
<script type="text/javascript" src="../../_static/doctools.js"></script>
<link rel="author" title="About these documents" href="../../about.html" />
+ <link rel="index" title="Index" href="../../genindex.html" />
+ <link rel="search" title="Search" href="../../search.html" />
<link rel="copyright" title="Copyright" href="../../copyright.html" />
- <link rel="top" title="MIT Kerberos Documentation" href="../../index.html" />
- <link rel="up" title="Administration programs" href="index.html" />
<link rel="next" title="k5srvutil" href="k5srvutil.html" />
<link rel="prev" title="kproplog" href="kproplog.html" />
</head>
@@ -61,7 +59,7 @@
<div class="documentwrapper">
<div class="bodywrapper">
- <div class="body">
+ <div class="body" role="main">
<div class="section" id="ktutil">
<span id="ktutil-1"></span><h1>ktutil<a class="headerlink" href="#ktutil" title="Permalink to this headline">¶</a></h1>
@@ -72,16 +70,18 @@
<div class="section" id="description">
<h2>DESCRIPTION<a class="headerlink" href="#description" title="Permalink to this headline">¶</a></h2>
<p>The ktutil command invokes a command interface from which an
-administrator can read, write, or edit entries in a keytab or Kerberos
-V4 srvtab file.</p>
+administrator can read, write, or edit entries in a keytab. (Kerberos
+V4 srvtab files are no longer supported.)</p>
</div>
<div class="section" id="commands">
<h2>COMMANDS<a class="headerlink" href="#commands" title="Permalink to this headline">¶</a></h2>
<div class="section" id="list">
<h3>list<a class="headerlink" href="#list" title="Permalink to this headline">¶</a></h3>
<blockquote>
-<div><strong>list</strong></div></blockquote>
-<p>Displays the current keylist.</p>
+<div><strong>list</strong> [<strong>-t</strong>] [<strong>-k</strong>] [<strong>-e</strong>]</div></blockquote>
+<p>Displays the current keylist. If <strong>-t</strong>, <strong>-k</strong>, and/or <strong>-e</strong> are
+specified, also display the timestamp, key contents, or enctype
+(respectively).</p>
<p>Alias: <strong>l</strong></p>
</div>
<div class="section" id="read-kt">
@@ -91,13 +91,6 @@ V4 srvtab file.</p>
<p>Read the Kerberos V5 keytab file <em>keytab</em> into the current keylist.</p>
<p>Alias: <strong>rkt</strong></p>
</div>
-<div class="section" id="read-st">
-<h3>read_st<a class="headerlink" href="#read-st" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>read_st</strong> <em>srvtab</em></div></blockquote>
-<p>Read the Kerberos V4 srvtab file <em>srvtab</em> into the current keylist.</p>
-<p>Alias: <strong>rst</strong></p>
-</div>
<div class="section" id="write-kt">
<h3>write_kt<a class="headerlink" href="#write-kt" title="Permalink to this headline">¶</a></h3>
<blockquote>
@@ -105,13 +98,6 @@ V4 srvtab file.</p>
<p>Write the current keylist into the Kerberos V5 keytab file <em>keytab</em>.</p>
<p>Alias: <strong>wkt</strong></p>
</div>
-<div class="section" id="write-st">
-<h3>write_st<a class="headerlink" href="#write-st" title="Permalink to this headline">¶</a></h3>
-<blockquote>
-<div><strong>write_st</strong> <em>srvtab</em></div></blockquote>
-<p>Write the current keylist into the Kerberos V4 srvtab file <em>srvtab</em>.</p>
-<p>Alias: <strong>wst</strong></p>
-</div>
<div class="section" id="clear-list">
<h3>clear_list<a class="headerlink" href="#clear-list" title="Permalink to this headline">¶</a></h3>
<blockquote>
@@ -130,8 +116,13 @@ V4 srvtab file.</p>
<h3>add_entry<a class="headerlink" href="#add-entry" title="Permalink to this headline">¶</a></h3>
<blockquote>
<div><strong>add_entry</strong> {<strong>-key</strong>|<strong>-password</strong>} <strong>-p</strong> <em>principal</em>
-<strong>-k</strong> <em>kvno</em> <strong>-e</strong> <em>enctype</em> [<strong>-s</strong> <em>salt</em>]</div></blockquote>
-<p>Add <em>principal</em> to keylist using key or password.</p>
+<strong>-k</strong> <em>kvno</em> [<strong>-e</strong> <em>enctype</em>] [<strong>-f</strong>|<strong>-s</strong> <em>salt</em>]</div></blockquote>
+<p>Add <em>principal</em> to keylist using key or password. If the <strong>-f</strong> flag
+is specified, salt information will be fetched from the KDC; in this
+case the <strong>-e</strong> flag may be omitted, or it may be supplied to force a
+particular enctype. If the <strong>-f</strong> flag is not specified, the <strong>-e</strong>
+flag must be specified, and the default salt will be used unless
+overridden with the <strong>-s</strong> option.</p>
<p>Alias: <strong>addent</strong></p>
</div>
<div class="section" id="list-requests">
@@ -152,21 +143,26 @@ V4 srvtab file.</p>
<div class="section" id="example">
<h2>EXAMPLE<a class="headerlink" href="#example" title="Permalink to this headline">¶</a></h2>
<blockquote>
-<div><div class="highlight-python"><div class="highlight"><pre>ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
- aes128-cts-hmac-sha1-96
-Password for alice@BLEEP.COM:
-ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
- aes256-cts-hmac-sha1-96
-Password for alice@BLEEP.COM:
-ktutil: write_kt keytab
-ktutil:
+<div><div class="highlight-default"><div class="highlight"><pre><span></span><span class="n">ktutil</span><span class="p">:</span> <span class="n">add_entry</span> <span class="o">-</span><span class="n">password</span> <span class="o">-</span><span class="n">p</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="o">-</span><span class="n">k</span> <span class="mi">1</span> <span class="o">-</span><span class="n">e</span>
+ <span class="n">aes128</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
+<span class="n">Password</span> <span class="k">for</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
+<span class="n">ktutil</span><span class="p">:</span> <span class="n">add_entry</span> <span class="o">-</span><span class="n">password</span> <span class="o">-</span><span class="n">p</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span> <span class="o">-</span><span class="n">k</span> <span class="mi">1</span> <span class="o">-</span><span class="n">e</span>
+ <span class="n">aes256</span><span class="o">-</span><span class="n">cts</span><span class="o">-</span><span class="n">hmac</span><span class="o">-</span><span class="n">sha1</span><span class="o">-</span><span class="mi">96</span>
+<span class="n">Password</span> <span class="k">for</span> <span class="n">alice</span><span class="nd">@BLEEP</span><span class="o">.</span><span class="n">COM</span><span class="p">:</span>
+<span class="n">ktutil</span><span class="p">:</span> <span class="n">write_kt</span> <span class="n">alice</span><span class="o">.</span><span class="n">keytab</span>
+<span class="n">ktutil</span><span class="p">:</span>
</pre></div>
</div>
</div></blockquote>
</div>
+<div class="section" id="environment">
+<h2>ENVIRONMENT<a class="headerlink" href="#environment" title="Permalink to this headline">¶</a></h2>
+<p>See <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a> for a description of Kerberos environment
+variables.</p>
+</div>
<div class="section" id="see-also">
<h2>SEE ALSO<a class="headerlink" href="#see-also" title="Permalink to this headline">¶</a></h2>
-<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><em>kadmin</em></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><em>kdb5_util</em></a></p>
+<p><a class="reference internal" href="kadmin_local.html#kadmin-1"><span class="std std-ref">kadmin</span></a>, <a class="reference internal" href="kdb5_util.html#kdb5-util-8"><span class="std std-ref">kdb5_util</span></a>, <a class="reference internal" href="../../user/user_config/kerberos.html#kerberos-7"><span class="std std-ref">kerberos</span></a></p>
</div>
</div>
@@ -184,9 +180,7 @@ ktutil:
<li><a class="reference internal" href="#commands">COMMANDS</a><ul>
<li><a class="reference internal" href="#list">list</a></li>
<li><a class="reference internal" href="#read-kt">read_kt</a></li>
-<li><a class="reference internal" href="#read-st">read_st</a></li>
<li><a class="reference internal" href="#write-kt">write_kt</a></li>
-<li><a class="reference internal" href="#write-st">write_st</a></li>
<li><a class="reference internal" href="#clear-list">clear_list</a></li>
<li><a class="reference internal" href="#delete-entry">delete_entry</a></li>
<li><a class="reference internal" href="#add-entry">add_entry</a></li>
@@ -195,6 +189,7 @@ ktutil:
</ul>
</li>
<li><a class="reference internal" href="#example">EXAMPLE</a></li>
+<li><a class="reference internal" href="#environment">ENVIRONMENT</a></li>
<li><a class="reference internal" href="#see-also">SEE ALSO</a></li>
</ul>
</li>
@@ -209,6 +204,7 @@ ktutil:
<li class="toctree-l2"><a class="reference internal" href="../conf_files/index.html">Configuration Files</a></li>
<li class="toctree-l2"><a class="reference internal" href="../realm_config.html">Realm configuration decisions</a></li>
<li class="toctree-l2"><a class="reference internal" href="../database.html">Database administration</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../dbtypes.html">Database types</a></li>
<li class="toctree-l2"><a class="reference internal" href="../lockout.html">Account lockout</a></li>
<li class="toctree-l2"><a class="reference internal" href="../conf_ldap.html">Configuring Kerberos with OpenLDAP back-end</a></li>
<li class="toctree-l2"><a class="reference internal" href="../appl_servers.html">Application servers</a></li>
@@ -216,6 +212,8 @@ ktutil:
<li class="toctree-l2"><a class="reference internal" href="../backup_host.html">Backups of secure hosts</a></li>
<li class="toctree-l2"><a class="reference internal" href="../pkinit.html">PKINIT configuration</a></li>
<li class="toctree-l2"><a class="reference internal" href="../otp.html">OTP Preauthentication</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../spake.html">SPAKE Preauthentication</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../dictionary.html">Addressing dictionary attack risks</a></li>
<li class="toctree-l2"><a class="reference internal" href="../princ_dns.html">Principal names and DNS</a></li>
<li class="toctree-l2"><a class="reference internal" href="../enctypes.html">Encryption types</a></li>
<li class="toctree-l2"><a class="reference internal" href="../https.html">HTTPS proxy configuration</a></li>
@@ -229,7 +227,7 @@ ktutil:
<li class="toctree-l3"><a class="reference internal" href="kprop.html">kprop</a></li>
<li class="toctree-l3"><a class="reference internal" href="kpropd.html">kpropd</a></li>
<li class="toctree-l3"><a class="reference internal" href="kproplog.html">kproplog</a></li>
-<li class="toctree-l3 current"><a class="current reference internal" href="">ktutil</a></li>
+<li class="toctree-l3 current"><a class="current reference internal" href="#">ktutil</a></li>
<li class="toctree-l3"><a class="reference internal" href="k5srvutil.html">k5srvutil</a></li>
<li class="toctree-l3"><a class="reference internal" href="sserver.html">sserver</a></li>
</ul>
@@ -268,8 +266,8 @@ ktutil:
<div class="footer-wrapper">
<div class="footer" >
- <div class="right" ><i>Release: 1.16</i><br />
- &copy; <a href="../../copyright.html">Copyright</a> 1985-2017, MIT.
+ <div class="right" ><i>Release: 1.21.1</i><br />
+ &copy; <a href="../../copyright.html">Copyright</a> 1985-2023, MIT.
</div>
<div class="left">
generated by cgit v1.3 (git 2.53.0) at 2026-04-24 09:36:25 +0000