Re: Is there a "batchable" way to do ktutil list
Dameon Wagner <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Organization | University of Oxford IT Services |
| Message-ID | <[email protected]> |
On Wed, Apr 21 2021 at 00:56:39 -0700, Dan Mahoney (Gushi) scribbled in "Is there a "batchable" way to do ktutil list": > All, > > Dayjob has a puppet fact that, under freeBSD, uses "ktutil list" to get > the kvno of a given host. This works great because the heimdal kerberos > that's built into freeBSD is what we like to parse. It takes a -k > argument to specify a keytab file. > > Linux is another story. Under ubuntu, the mit version of ktutil gets > installed, and I can't figure out how to script it easily. There are no > documented ways to pass an arg, or even to print the version. (We can > glean it by looking at installed packages). > > Is there another command that is more script-friendly? If not, can > someone share a good way to pass args to the MIT ktutil? If you want the "true" kvno value, from a KDC, then the `kvno` tool will return the results you want. I you want the kvno values from within a keytab, like ktutil would provide, then I'd look at the `k5srvutil` tool, which will take subcommands and arguments for passing in the path to a keytab. Cheers. Dameon. -- ><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <>< Dr. Dameon Wagner, Unix Platform Services IT Services, University of Oxford ><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <>< ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos