Re: Copy a single KDC entry from one Heimdal database to another

Henry B Hotz <[email protected]> Wed, 14 Nov 2018 21:38:34 -0800

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<[email protected]>

kadmin dump | grep ^principal >extract
kadmin merge extract

Personal email. [email protected]

> On Nov 14, 2018, at 1:10 PM, Viktor Dukhovni <[email protected]> wrote:
> 
>> On Wed, Nov 14, 2018 at 09:16:13AM -0800, Adam Lewenberg wrote:
>> 
>> Is it possible to copy a single Heimdal KDC entry from one database to 
>> another?
> 
> The "kadmin merge" command can load a partial database dump.  But
> "kadmin dump" only produces full database dumps.  If you then edit
> the full dump to contain just the entry of interest, "merge" may
> be able to re-create it.
> 
> Neither the "HDB" nor the "HDBGET" keytab types support writes, so
> you can't use "ktutil copy".
> 
> -- 
>    Viktor.