OnWorks favicon

ipa-rmkeytab - Online in the Cloud

Run ipa-rmkeytab in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command ipa-rmkeytab that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator



ipa-rmkeytab - Remove a kerberos principal from a keytab


ipa-rmkeytab [ -p principal-name ] [ -k keytab-file ] [ -r realm ] [ -d ]


Removes a kerberos principal from a keytab.

Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A
keytab is a file with one or more secrets (or keys) for a kerberos principal.

A kerberos service principal is a kerberos identity that can be used for authentication.
Service principals contain the name of the service, the hostname of the server, and the
realm name.

ipa-rmkeytab provides two ways to remove principals. A specific principal can be removed
or all principals for a given realm can be removed.

All encryption types and versions of a principal are removed.

The realm may be included when removing a specific principal but it is not required.

NOTE: removing a principal from the keytab does not affect the Kerberos principal stored
in the IPA server. It merely removes the entry from the local keytab.


-p principal-name
The non-realm part of the full principal name.

-k keytab-file
The keytab file to remove the principal(s) from.

-r realm
A realm to remove all principals for.

-d Debug mode. Additional information is displayed.


Remove the NFS service principal on the host foo.example.com from /tmp/nfs.keytab.

# ipa-rmkeytab -p nfs/foo.example.com -k /tmp/nfs.keytab

Remove the ldap service principal on the host foo.example.com from /etc/krb5.keytab.

# ipa-rmkeytab -p ldap/foo.example.com -k /etc/krb5.keytab

Remove all principals for the realm EXAMPLE.COM.

# ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab


The exit status is 0 on success, nonzero on error.

1 Kerberos initialization failed

2 Memory allocation error

3 Unable to open keytab

4 Unable to parse the principal name

5 Principal name or realm not found in keytab

6 Unable to remove principal from keytab

Use ipa-rmkeytab online using onworks.net services

Free Servers & Workstations

Download Windows & Linux apps

  • 1
    XyZerKunG ServerTool
    XyZerKunG ServerTool
    XyZerKunG ServerTool helps you to make
    your own Minecraft server and play with
    your friend for a few minutes.
    Features:Automatically create a
    Minecraft serverU...
    Download XyZerKunG ServerTool
  • 2
    Java source intended to serve as a
    nexus for teaching both mathematics and
    software solutions for computation on
    iterative equations. Public interfaces
    allow a...
    Download CalcTools
  • 3
    Rocket.Chat Desktop Client
    Rocket.Chat Desktop Client
    Rocket.Chat Desktop client is the
    official desktop app for Rocket.Chat,
    the simple but powerful open source web
    chat platform. It's tested on macOS,
    Download Rocket.Chat Desktop Client
  • 4
    OfficeFloor provides inversion of
    coupling control, with its: - dependency
    injection - continuation injection -
    thread injection For more information
    visit the...
    Download OfficeFloor
  • 5
    DivKit is an open source Server-Driven
    UI (SDUI) framework. It allows you to
    roll out server-sourced updates to
    different app versions. Also, it can be
    used fo...
    Download DivKit
  • 6
    Utility to convert between various
    subscription format. Shadowrocket users
    should use ss, ssr or v2ray as target.
    You can add &remark= to
    Telegram-liked HT...
    Download subconverter
  • More »

Linux commands