EnglishFrenchSpanish

Ad


OnWorks favicon

ipa-rmkeytab - Online in the Cloud

Run ipa-rmkeytab in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command ipa-rmkeytab that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

PROGRAM:

NAME


ipa-rmkeytab - Remove a kerberos principal from a keytab

SYNOPSIS


ipa-rmkeytab [ -p principal-name ] [ -k keytab-file ] [ -r realm ] [ -d ]

DESCRIPTION


Removes a kerberos principal from a keytab.

Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A
keytab is a file with one or more secrets (or keys) for a kerberos principal.

A kerberos service principal is a kerberos identity that can be used for authentication.
Service principals contain the name of the service, the hostname of the server, and the
realm name.

ipa-rmkeytab provides two ways to remove principals. A specific principal can be removed
or all principals for a given realm can be removed.

All encryption types and versions of a principal are removed.

The realm may be included when removing a specific principal but it is not required.

NOTE: removing a principal from the keytab does not affect the Kerberos principal stored
in the IPA server. It merely removes the entry from the local keytab.

OPTIONS


-p principal-name
The non-realm part of the full principal name.

-k keytab-file
The keytab file to remove the principal(s) from.

-r realm
A realm to remove all principals for.

-d Debug mode. Additional information is displayed.

EXAMPLES


Remove the NFS service principal on the host foo.example.com from /tmp/nfs.keytab.

# ipa-rmkeytab -p nfs/foo.example.com -k /tmp/nfs.keytab

Remove the ldap service principal on the host foo.example.com from /etc/krb5.keytab.

# ipa-rmkeytab -p ldap/foo.example.com -k /etc/krb5.keytab

Remove all principals for the realm EXAMPLE.COM.

# ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab

EXIT STATUS


The exit status is 0 on success, nonzero on error.

1 Kerberos initialization failed

2 Memory allocation error

3 Unable to open keytab

4 Unable to parse the principal name

5 Principal name or realm not found in keytab

6 Unable to remove principal from keytab

Use ipa-rmkeytab online using onworks.net services


Ad