The default, DES3-CBC-MD5, will be set as the encryption type if you do not specify any of the encryption types previously mentioned.
Specifies the encryption and checksum mechanism of the primary principal. Following are the encryption types that are supported:
Specifies a destination file name and path to store the output. If you do not use the -fswitch, the text is sent to stdout.

NOTE

NOTE

Administering the Kerberos Server

Dumping the Kerberos DatabaseDumping the Kerberos Database

The kdb_dump utility copies the contents of the principal database to stdout or to a text file. By default, the output is displayed on the terminal using the stdout command.

You must be a root user to run the kdb_dump program.

The general syntax for dumping the Kerberos database is as follows:

kdb_dump [-f filename]

The kdb_dump utility uses the following option: -f filename

-e enctype

•3DES or 5: DES-CBC-MD5 (default)

•DES-MD5 or 3: DES-CBC-MD5

•DES-CRC or 1: DES-CBC-CRC

Following is an example of using kdb_dump:

shell% kdb_dump -f <filename>

Chapter 8

231