Name

kdb_util − Kerberos database utility. 

Syntax

/var/dss/kerberos/bin/kdb_util operation filename [ database ]

Arguments

operation Function to perform on the database. The operation argument must be one of the following values:

loadConverts the database in file filename, to ndbm format and overwrites the ndbm-formatted database specified.

dumpConverts the ndbm-formatted database into krb_dbase(5krb) form, and writes the result to file, filename. 

slave_dump
Performs the same function as dump, and creates the file filename.dump_ok when finished.  The filename.dump_ok is used by kprop to determine if a slave_dump is in progress, or if it did not complete successfully.

new_master_key
Prompts you for the old key of the Kerberos database as well as a new master key.  It converts the ndbm-formatted database into krb_dbase(5krb) format and, at the same time, decrypts those sections of the database encrypted with the old master key and re-encrypts them with the new master key.  The result is written to the file, filename. 

filename The name of the source file for the load operation or the destination file for the operations: dump, slave_dump, and new_master_key. 

database The name of the ndbm-formatted database. If the argument is not included, the Kerberos database is stored in files /var/dss/kerberos/dbase/principal.dir, /var/dss/kerberos/dbase/principal.pag, and /var/dss/kerberos/dbase/principal.ok by default.

Description

The kdb_util command allows the Kerberos administrator to perform several functions on the entire Kerberos database of a master or slave Kerberos server in one operation.  The database argument specifies the name of the ndbm-formatted Kerberos database. kdb_util reads from and writes to the ndbm-formatted Kerberos database and, in addition, it reads from and writes to a file in krb_dbase(5krb) format: filename.  A krb_dbase(5krb) file is an ASCII representation of a Kerberos database.  The list of functions that can be specified by the operation argument are listed in the Arguments section. 

Whenever the ndbm Kerberos database is changed by kdb_util, the modification time of /var/dss/kerberos/dbase/principal.ok is updated.  The principal.ok file indicates the age of the database.

Files

/var/dss/kerberos/dbase/principal.pag

/var/dss/kerberos/dbase/principal.dir

/var/dss/kerberos/dbase/principal.ok

See Also

krb_dbase(5krb), kdb_init(8krb), kdb_edit(8krb), kdb_destroy(8krb), kstash(8krb)