Administering the Kerberos Server

Deleting a Service Principal

 

 

Deleting a Service Principal

 

 

The Kerberos server requires several specific principals. If you

 

 

accidentally delete these principals, you must restore the principal

 

 

database from a backup tape.

 

 

To delete a service principal that has a random key extracted to the

 

 

service key table, remove the entry from the v5srvtab service key table

 

 

file by completing the following steps:

Step

1.

Log on to the host system where the service is located, or connect to the

 

 

remote host using the telnet <host_name> command.

Step

2.

Launch the remote administrator, HP Kerberos Administrator, and log

 

 

on using a principal account that has the required administrative

 

 

permissions.

Step

3.

In the HP Kerberos Administrator window, choose the Principals tab.

Step

4.

In the Realm text box, select the realm that contains the service

 

 

principal to be deleted.

Step

5.

Select the principal name to be deleted in the List of Principals list box.

Step

6.

Click Delete to delete the principal.

 

 

The following warning message is displayed:

 

 

Do you really want to delete principal <principal_name>?

Step

7.

Click Yes to delete the principal.

 

 

The principal is automatically deleted from the List of Principals list box.

To remove the entry of the principal from the key table, v5srvtab, use the ktutil tool. For more information on ktutil, type man 1 ktutil at the HP-UX prompt.

Chapter 8

177