manpagez: man pages & more
man kproplog(8)
Home | html | info | man
kproplog(8)                      MIT Kerberos                      kproplog(8)




NAME

       kproplog - display the contents of the Kerberos principal update log


SYNOPSIS

       kproplog [-h] [-e num] [-v] kproplog [-R]


DESCRIPTION

       The  kproplog  command displays the contents of the KDC database update
       log to standard output.  It can be used to keep  track  of  incremental
       updates  to  the  principal database.  The update log file contains the
       update log maintained by the kadmind(8)  process  on  the  primary  KDC
       server  and  the  kpropd(8)  process  on the replica KDC servers.  When
       updates occur, they are logged to  this  file.   Subsequently  any  KDC
       replica  configured  for  incremental  updates will request the current
       data from the primary KDC and update their log file  with  any  updates
       returned.

       The  kproplog  command requires read access to the update log file.  It
       will display update entries only for the KDC it runs on.

       If no options are specified, kproplog displays a summary of the  update
       log.   If  invoked  on  the  primary, kproplog also displays all of the
       update entries.  If invoked on a replica KDC server, kproplog  displays
       only  a summary of the updates, which includes the serial number of the
       last update received and the associated time stamp of the last  update.


OPTIONS

       -R     Reset  the  update log.  This forces full resynchronization.  If
              used on a replica then that replica will request a full  resync.
              If  used  on  the  primary  then  all replicas will request full
              resyncs.

       -h     Display a summary of the update log.  This information  includes
              the  database  version number, state of the database, the number
              of updates in the log, the time stamp  of  the  first  and  last
              update,  and  the  version  number  of the first and last update
              entry.

       -e num Display the last num update entries in the log.  This is  useful
              when debugging synchronization between KDC servers.

       -v     Display  individual  attributes  per  update.  An example of the
              output generated for one entry:

                 Update Entry
                    Update serial # : 4
                    Update operation : Add
                    Update principal : test@EXAMPLE.COM
                    Update size : 424
                    Update committed : True
                    Update time stamp : Fri Feb 20 23:37:42 2004
                    Attributes changed : 6
                          Principal
                          Key data
                          Password last changed
                          Modifying principal
                          Modification time
                          TL data


ENVIRONMENT

       See kerberos(7) for a description of Kerberos environment variables.


SEE ALSO

       kpropd(8), kerberos(7)


AUTHOR

       MIT


COPYRIGHT

       1985-2021, MIT



1.19                                                               kproplog(8)

kerberos5 1.19 - Generated Thu Feb 11 15:31:22 CST 2021
© manpagez.com 2000-2024
Individual documents may contain additional copyright information.