Node:Adding Principals to Keytabs, Next:Removing Principals from Keytabs, Previous:Keytabs, Up:Keytabs
To generate a keytab, or to add a principal to an existing keytab, use
the ktadd command from kadmin, which requires the
"inquire" administrative privilege. (If you use the -glob
princ_exp option, it also requires the "list" administrative
privilege.) The syntax is:
ktadd [-k[eytab] keytab] [-q] [-e
key:salt_list] [principal | -glob princ_exp]
[...]
The ktadd command takes the following switches:
ktadd will use the
default keytab file (/etc/krb5.keytab).
ktadd to display less verbose
information.
list_principals (see Retrieving a List of Principals) command.
Here is a sample session, using configuration files that enable only
des-cbc-crc encryption. (The line beginning with => is a
continuation of the previous line.)
kadmin: ktadd host/daffodil.mit.edu@ATHENA.MIT.EDU
kadmin: Entry for principal host/daffodil.mit.edu@ATHENA.MIT.EDU with
kvno 2, encryption type DES-CBC-CRC added to keytab
WRFILE:/etc/krb5.keytab.
kadmin:
kadmin: ktadd -k /usr/local/var/krb5kdc/kadmind.keytab
=> kadmin/admin kadmin/changepw
kadmin: Entry for principal kadmin/admin@ATHENA.MIT.EDU with
kvno 3, encryption type DES-CBC-CRC added to keytab
WRFILE:/usr/local/var/krb5kdc/kadmind.keytab.
kadmin: