Re: How to quickly get a snapshot of the Heimdal DB file

On Sat, Apr 01, 2017 at 04:59:56PM -0700, Adam Lewenberg wrote:
> I am looking for a quick way to get a snapshot of the Kerberos database
> file.
> 
> The most obvious way to do this would be to shutdown the kerberos service,
> copy the file, and restart the service. This could be done on one of the
> replicas, perhaps one that does not get actual authentication requests.

You can use the lock sub-command of kadmin -l, copy the HDB, and then
unlock.

You could also setup a hidden slave on the same host as the master, then
stop that ipropd-slave to take a snapshot of its HDB.

Nico
--