Administration

Principal Database Utilities

Principal Database Utilities

The principal database utilities are tools that you can use to globally manage the principal database. Use these tools only if the database was not properly created or configured during installation, or if you are debugging or upgrading your security server.

To use the principal database utilities, you must have operating system administrative privileges or logged on as the root user. Table 6-5lists the global database tasks and the tools used to perform each task.

Table 6-5

Principal Database Utilities

 

 

 

 

 

If you want to

Use This Tool

 

 

 

 

Creates a principal database.

kdb_create

 

 

 

 

Securely remove the principal database.

kdb_destroy

 

 

 

 

Dump the principal database to an stdout

kdb_dump

 

or text file specified.

 

 

 

 

 

Load all principal names into the principal

kdb_load

 

database from an existing database dump

 

 

file.

 

 

 

 

 

Stash the master key of the security server.

kdb_stash

 

 

 

The Principal Database Utilities have been discussed in detail in the subsequent chapters of this chapter. Export the following path before executing any of the commands mentioned above:

$ EXPORT PATH=$PATH:/opt/krb5/admin

190

Chapter 6