Filter
Top Products
Administering the Kerberos Server
Dumping the Kerberos Database
Chapter 8 231
Dumping the Kerberos Database
The kdb_dump utility copies the contents of the principal database to
stdout or to a text file. By default, the output is displayed on the
terminal using the stdout command.
NOTE You must be a root user to run the kdb_dump program.
The general syntax for dumping the Kerberos database is as follows:
kdb_dump [-f filename]
The kdb_dump utility uses the following option:
-f filename Specifies a destination file name and path to store the
output. If you do not use the -f switch, the text is sent
to stdout.
-e enctype Specifies the encryption and checksum mechanism of
the primary principal. Following are the encryption
types that are supported:
• 3DES or 5: DES-CBC-MD5 (default)
• DES-MD5 or 3: DES-CBC-MD5
• DES-CRC or 1: DES-CBC-CRC
NOTE The default, DES3-CBC-MD5, will be set as the
encryption type if you do not specify any of the
encryption types previously mentioned.
Following is an example of using kdb_dump:
shell% kdb_dump -f <filename>