Administering the Kerberos Server

Principal Database UtilitiesPrincipal Database Utilities

Principal database utilities are tools that help you to globally manage the principal database. Use these tools only if the database was not properly created or configured during installation, or if you are debugging or upgrading your Kerberos server.

To use the principal database utilities, you must have root user privileges. Table 8-6 lists the global database tasks and the tools used to perform each task.

Table 8-19

Principal Database Utilities

 

 

 

 

UtilityTask

 

 

 

 

kdb_create

Create a principal database.

 

 

 

 

kdb_destroy

Securely remove the principal database.

 

 

 

 

kdb_dump

Dump the principal database to stdout or to a

 

 

specified text file.

 

 

 

 

kdb_load

Load all principal names into the principal

 

 

database from an existing database dump file.

 

 

 

 

kdb_stash

Stash the master key of the Kerberos server.

 

 

 

Principal database utilities are described in detail later in this chapter. Export the following path before executing any of the commands at the HP-UX command prompt:

$ export PATH=$PATH:/opt/krb5/admin

224

Chapter 8