Introduction to the Kerberos Products and GSS-API

KRB5 Client Software

 

ktutil: quit (Alias: exit or q)

Options

list (Alias: l)

The l option displays the current keylist.

 

read_kt keytab (Alias: rkt) The rkt option reads the Kerberos V5

 

 

keytab file keytab into the current keylist.

 

read_st srvtab (Alias: rst) The rst option reads the Kerberos V4

 

 

server KEYTAB file server keytab into the current

 

 

keylist.

 

write_kt keytab (Alias: wkt) The wkt option writes the current keylist

 

 

into the Kerberos V5 keytab file keytab.

 

write_st srvtab (Alias: wst) The wst option writes the current keylist

 

 

into the Kerberos V4 server keytab file.

 

clear_list (Alias: clear) The clear option clears the current keylist.

 

delete_entry slot (Alias: delete) The delete option deletes the entry

 

 

in slot number slot from the current keylist.

 

list_requests (Alias: lr or ?) The list_request option displays a

 

 

list of available commands.

Reference

To view the ktutil manpage, issue the following command:

 

$ man 1 ktutil

 

 

The kvno Utility

Description

The kvno utility acquires a service ticket for the specified Kerberos

 

principals to return key version numbers of Kerberos principals.

 

The kvno utility uses the environment variable KRB5CCNAME, which

 

records the location of the credentials (ticket) cache.

Synopsis

/usr/bin/kvno [-e etype] service1, [service2,...]

Options

-e etype

Specifies the encryption type which will be requested

 

 

for the session key of all the services named on the

 

 

command line. This is useful in certain backward

 

 

compatibility situations. The value of etype can be one

 

 

DES-CBC-CRC,DES-CBC-RAW or DES-CBC-MD5.

[service1], [service2] Service name(s) or principal name(s). To view the kvno manpage, issue the following command:

62

Chapter 2