ktutil — MIT Kerberos Documentation

# MIT Kerberos Documentation

Contents | previous | next | index | Search | feedback

# ktutil

## SYNOPSIS

ktutil

## DESCRIPTION

The ktutil command invokes a command interface from which an administrator can read, write, or edit entries in a keytab. (Kerberos V4 srvtab files are no longer supported.)

## COMMANDS

### list

> list [-t] [-k] [-e]

Displays the current keylist. If -t, -k, and/or -e are specified, also display the timestamp, key contents, or enctype (respectively).

Alias: l

### read_kt

> read_kt keytab

Read the Kerberos V5 keytab file keytab into the current keylist.

Alias: rkt

### write_kt

> write_kt keytab

Write the current keylist into the Kerberos V5 keytab file keytab.

Alias: wkt

### clear_list

> clear_list

Clear the current keylist.

Alias: clear

### delete_entry

> delete_entry slot

Delete the entry in slot number slot from the current keylist.

Alias: delent

### add_entry

> add_entry {-key|-password} -p principal -k kvno [-e enctype] [-f|-s salt]

Add principal to keylist using key or password. If the -f flag is specified, salt information will be fetched from the KDC; in this case the -e flag may be omitted, or it may be supplied to force a particular enctype. If the -f flag is not specified, the -e flag must be specified, and the default salt will be used unless overridden with the -s option.

Alias: addent

### list_requests

> list_requests

Displays a listing of available commands.

Aliases: lr, ?

### quit

> quit

Quits ktutil.

Aliases: exit, q

## EXAMPLE

>     ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
>         aes128-cts-hmac-sha1-96
>     Password for alice@BLEEP.COM:
>     ktutil:  add_entry -password -p alice@BLEEP.COM -k 1 -e
>         aes256-cts-hmac-sha1-96
>     Password for alice@BLEEP.COM:
>     ktutil:  write_kt alice.keytab
>     ktutil:

## ENVIRONMENT

See kerberos for a description of Kerberos environment variables.

## SEE ALSO

kadmin, kdb5_util, kerberos