ktutil - Kerberos keytab file maintenance utility
Contents
Commands
listlist [-t] [-k] [-e]
Displays the current keylist. If -t, -k, and/or -e are specified, also display the timestamp, key
contents, or enctype (respectively).
Alias: lread_ktread_ktkeytab
Read the Kerberos V5 keytab file keytab into the current keylist.
Alias: rktwrite_ktwrite_ktkeytab
Write the current keylist into the Kerberos V5 keytab file keytab.
Alias: wktclear_listclear_list
Clear the current keylist.
Alias: cleardelete_entrydelete_entryslot
Delete the entry in slot number slot from the current keylist.
Alias: delentadd_entryadd_entry {-key|-password} -pprincipal-kkvno [-eenctype] [-f|-ssalt]
Add principal to keylist using key or password. If the -f flag is specified, salt information will be
fetched from the KDC; in this case the -e flag may be omitted, or it may be supplied to force a
particular enctype. If the -f flag is not specified, the -e flag must be specified, and the default salt
will be used unless overridden with the -s option.
Alias: addentlist_requestslist_requests
Displays a listing of available commands.
Aliases: lr, ?quitquit
Quits ktutil.
Aliases: exit, qCopyright
1985-2024, MIT
1.21.3 KTUTIL(1)
Description
The ktutil command invokes a command interface from which an administrator can read, write, or edit
entries in a keytab. (Kerberos V4 srvtab files are no longer supported.)
Environment
See kerberos(7) for a description of Kerberos environment variables.
Example
ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
aes128-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil: add_entry -password -p alice@BLEEP.COM -k 1 -e
aes256-cts-hmac-sha1-96
Password for alice@BLEEP.COM:
ktutil: write_kt alice.keytab
ktutil:
Name
ktutil - Kerberos keytab file maintenance utility
See Also
kadmin(1), kdb5_util(8), kerberos(7)
Synopsis
ktutil
