'\" te
.\" Copyright 1987, 1989 by the Student Information Processing Board of the Massachusetts Institute of Technology.  For copying and distribution information,  please see the file kerberosv5/mit-sipb-copyright.h.
.\" Portions Copyright (c) 2006, 2015, Oracle and/or its affiliates.          All rights reserved.
.TH ktutil 1 "06 Apr 2015" "SunOS 5.11" "User Commands"
.SH NAME
ktutil \- Kerberos keytab maintenance utility
.SH SYNOPSIS
.LP
.nf
\fB/usr/bin/ktutil\fR 
.fi

.SH DESCRIPTION
.sp
.LP
The \fBktutil\fR command is an interactive command-line interface utility for managing  the keylist in keytab files. You must read in a keytab's keylist  before you can manage it. Also, the user running the \fBktutil\fR command must have read/write permissions on the keytab. For example, if a keytab is owned by root, which it typically is, \fBktutil\fR must be run as root to have the appropriate permissions.
.SH COMMANDS
.sp
.ne 2
.mk
.na
\fB\fBclear_list\fR\fR
.ad
.br
.na
\fB\fBclear\fR\fR
.ad
.RS 23n
.rt  
Clears the current keylist.
.RE

.sp
.ne 2
.mk
.na
\fB\fBread_kt\fR \fIfile\fR\fR
.ad
.br
.na
\fB\fBrkt\fR \fIfile\fR\fR
.ad
.RS 23n
.rt  
Reads a keytab into the current keylist. You must specify a keytab \fIfile\fR to read.
.RE

.sp
.ne 2
.mk
.na
\fB\fBwrite_kt\fR \fIfile\fR\fR
.ad
.br
.na
\fB\fBwkt\fR \fIfile\fR\fR
.ad
.RS 23n
.rt  
Writes the current keylist to a keytab \fIfile\fR. You must specify a keytab file to write. If the keytab file already exists, the current keylist is appended to the existing keytab file.
.RE

.sp
.ne 2
.mk
.na
\fB\fBadd_entry\fR \fInumber\fR\fR
.ad
.br
.na
\fB\fBaddent\fR \fInumber\fR\fR
.ad
.RS 23n
.rt  
Adds an entry to the current keylist. Specify the entry by the keylist slot number.
.RE

.sp
.ne 2
.mk
.na
\fB\fBdelete_entry\fR \fInumber\fR\fR
.ad
.br
.na
\fB\fBdelent\fR \fInumber\fR\fR
.ad
.RS 23n
.rt  
Deletes an entry from the current keylist. Specify the entry by the keylist slot number.
.RE

.sp
.ne 2
.mk
.na
\fB\fBlist\fR\fR
.ad
.br
.na
\fB\fBl\fR\fR
.ad
.RS 23n
.rt  
Lists the current keylist.
.RE

.sp
.ne 2
.mk
.na
\fB\fBlist_request\fR\fR
.ad
.br
.na
\fB\fBlr\fR\fR
.ad
.RS 23n
.rt  
Lists available requests (commands).
.RE

.sp
.ne 2
.mk
.na
\fB\fBquit\fR\fR
.ad
.br
.na
\fB\fBexit\fR\fR
.ad
.br
.na
\fB\fBq\fR\fR
.ad
.RS 23n
.rt  
Exits utility.
.RE

.SH EXAMPLES
.LP
\fBExample 1 \fRDeleting a principal from a file
.sp
.LP
The following example deletes the \fBhost/denver@ACME.com\fR principal from the \fB/etc/krb5/krb5.keytab\fR file. Notice that if you want to delete an entry from an existing keytab, you must first write the keylist to a temporary keytab and then overwrite the existing keytab with the temporary keytab. This is because the \fBwkt\fR command actually appends the current keylist to an existing keytab, so you can't use it to overwrite a keytab.

.sp
.in +2
.nf
example# \fB/usr/krb5/bin/ktutil\fR
    ktutil: rkt /etc/krb5/krb5.keytab
    ktutil: list
slot KVNO Principal
---- ---- ---------------------------------------
   1    8 host/vail@ACME.COM
   2    5 host/denver@ACME.COM
    ktutil:delent 2
    ktutil:l
slot KVNO Principal
---- ---- --------------------------------------
   1    8 host/vail@ACME.COM
    ktutil:wkt /tmp/krb5.keytab
    ktutil:q
example# \fBmv /tmp/krb5.keytab /etc/krb5/krb5.keytab\fR
.fi
.in -2
.sp

.SH FILES
.sp
.ne 2
.mk
.na
\fB\fB/etc/krb5/krb5.keytab\fR\fR
.ad
.RS 25n
.rt  
keytab file for Kerberos clients
.RE

.SH ATTRIBUTES
.sp
.LP
See \fBattributes\fR(5) for descriptions of the following attributes:
.sp

.sp
.TS
tab() box;
cw(2.75i) |cw(2.75i) 
lw(2.75i) |lw(2.75i) 
.
ATTRIBUTE TYPEATTRIBUTE VALUE
_
Availabilityservice/security/kerberos-5
_
Interface StabilitySee below.
.TE

.sp
.LP
The command arguments are Committed. The command output is Uncommitted.
.SH SEE ALSO
.sp
.LP
\fBkadmin\fR(1M), \fBk5srvutil\fR(1M), \fBattributes\fR(5), \fBkerberos\fR(5) 
.sp
.LP
\fIManaging Kerberos and Other Authentication Services in Oracle Solaris 11.3\fR