KDB5_UTIL(8) MIT Kerberos KDB5_UTIL(8) (NAME) kdb5_util - (SYNOPSIS) kdb5_util [-r realm] [-d dbname] [-k mkeytype] [-kv mkeyVNO] [-M mkeyname] [-m] [-sf stashfilename] [-P password] [-x db_args] command [command_options] (DESCRIPTION) kdb5_util KDC . (ASCII) (dump) (load). kdb5_util (stash file) (live rollover) . kdb5_util (master key) . stash . KDC kdb5_util . (COMMAND-LINE OPTIONS) -r realm (realm) . -d dbname kdc.conf . . -k mkeytype . master_key_type kdc.conf . -kv mkeyVNO . . -M mkeyname (principal name) . master_key_name kdc.conf . -m . -sf stash_file stash . key_stash_file kdc.conf . -P password . . -x db_args . kadmin . (COMMANDS) create create [-s] . -s stash . . . destroy destroy [-f] (unlink) . -f . stash stash [-f keyfile] (master principal) stash . -f keyfile kdc.conf . dump dump [-b7|-r13|-r18] [-verbose] [-mkey_convert] [-new_mkey_file mkey_file] [-rev] [-recurse] [filename [principals...]] KADM5 ASCII (dump) . "kdb5_util load_dump version 7" . filename "-" dump . : -b7 Kerberos 5 Beta 7 ( "kdb5_util load_dump version 4") . 1.2.2 . -r13 Kerberos 5 1.3 ( "kdb5_util load_dump version 5") . 1.8 . -r18 Kerberos 5 1.8 ( "kdb5_util load_dump version 6") . 1.11 . -verbose (principal) . -mkey_convert . principal dump . . -new_mkey_file mkey_file stash file . stash dump . . -rev . . -recurse ( btree). . -rev . 1.15: 1.15 -recurse . 1.5: -recurse 1.15 . load load [-b7|-r13|-r18] [-hash] [-verbose] [-update] filename . dump . -update load dump . LDAP KDC -update . : -b7 Kerberos 5 Beta 7 ( "kdb5_util load_dump version 4") . 1.2.2 . -r13 Kerberos 5 1.3 ( "kdb5_util load_dump version 5") . 1.8 . -r18 Kerberos 5 1.8 ( "kdb5_util load_dump version 6") . 1.11 . -hash DB2 (hash) . btree . . -verbose . -update dump . dump . ark ark [-e enc:salt,...] principal principal . . -e (salt) . add_mkey add_mkey [-e etype] [-s] . . -e (Encryption types) kdc.conf . -s stash . kprop (replica) . stash stash kdb5_util . use_mkey kdb5_util . use_mkey use_mkey mkeyVNO [time] mkeyVNO . . time . time getdate . update_princ_encryption kdb5_util principal . list_mkeys list_mkeys . kvno enctype mkey getprinc kadmin. * mkey . purge_mkeys purge_mkeys [-f] [-n] [-v] . principal . -f . -n . -v . update_princ_encryption update_princ_encryption [-f] [-n] [-v] [princ-pattern] principal ( glob princ-pattern) . -f . -v . -n . tabdump tabdump [-H] [-c] [-e] [-n] [-o outfile] dumptype ( ) . () (CSV) . -H . dumptype ( ). : -H . -c ( ) (CSV) . -e "-1" . -n enctype . time_t POSIX . -o outfile dump . (Dump types): alias aliasname targetname keydata ( ) name keyindex kvno enctype key salttype salt keyinfo ( keydata ) princ_flags . -n . -n . name flag value ( / /) princ_lockout name last_success last_failed fail_count princ_meta name modby modtime lastpwd policy mkvno hist_kvno princ_stringattrs ( /) name key value princ_tktpolicy name expiration pw_expiration max_life max_renew_life : $ kdb5_util tabdump -o keyinfo.txt keyinfo $ cat keyinfo.txt name keyindex kvno enctype salttype salt K/M@EXAMPLE.COM 0 1 aes256-cts-hmac-sha384-192 normal -1 foo@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1 bar@EXAMPLE.COM 0 1 aes128-cts-hmac-sha1-96 normal -1 $ sqlite3 sqlite> .mode tabs sqlite> .import keyinfo.txt keyinfo sqlite> select * from keyinfo where enctype like 'aes256-%'; K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1 sqlite> .quit $ awk -F'\t' '$4 ~ /aes256-/ { print }' keyinfo.txt K/M@EXAMPLE.COM 1 1 aes256-cts-hmac-sha384-192 normal -1 (ENVIRONMENT) kerberos(7) . (SEE ALSO) kadmin(1) kerberos(7) (AUTHORS) (MIT) (COPYRIGHT) 1985-2026, MIT 1.22.2 KDB5_UTIL(8)