EXT_SRVTAB(8)

NAME
ext_srvtab - extract service key files from Kerberos key distribution center database

SYNOPSIS
ext_srvtab [ -n ] [ -r realm ] [ hostname ... ]

DESCRIPTION
ext_srvtab extracts service key files from the Kerberos key distribution center (KDC) database.

Upon execution, it prompts the user to enter the master key string for the database. If the -n option is specified, the master key is instead fetched from the master key cache file.

For each hostname specified on the command line, ext_srvtab creates the service key file hostname-new-srvtab, containing all the entries in the database with an instance field of hostname. This new file contains all the keys registered for Kerberos-mediated service providing programs which use the krb_get_phost(3) principal and instance conventions to run on the host hostname. If the -r option is specified, the realm fields in the extracted file will match the given realm rather than the local realm.

DIAGNOSTICS

"verify_master_key: Invalid master key, does not match database."
    The master key string entered was incorrect.

FILES

/etc/kerberosIV/principal.db
    DBM file containing database

/etc/kerberosIV/principal.ok
    Semaphore indicating that the DBM database is not being modified.

/etc/kerberosIV/master_key
    Master key cache file.

SEE ALSO
read_service_key(3), krb_get_phost(3)