ipa-rmkeytab(1) IPA Manual Pages ipa-rmkeytab(1)

# [NAME](#NAME)

ipa-rmkeytab - Remove a kerberos principal from a keytab

# [SYNOPSIS](#SYNOPSIS)

ipa-rmkeytab \[ **-p** principal-name ] \[ **-k** keytab-file ] \[ **-r** realm ] \[ **-d** ]

# [DESCRIPTION](#DESCRIPTION)

Removes a kerberos principal from a *keytab*.

Kerberos keytabs are used for services (like sshd) to perform kerberos authentication. A keytab is a file with one or more secrets (or keys) for a kerberos principal.

A kerberos service principal is a kerberos identity that can be used for authentication. Service principals contain the name of the service, the hostname of the server, and the realm name.

ipa-rmkeytab provides two ways to remove principals. A specific principal can be removed or all principals for a given realm can be removed.

All encryption types and versions of a principal are removed.

The realm may be included when removing a specific principal but it is not required.

**NOTE:** removing a principal from the keytab does not affect the Kerberos principal stored in the IPA server. It merely removes the entry from the local keytab.

# [OPTIONS](#OPTIONS)

[**-p principal-name**](#p)

The non-realm part of the full principal name.

[**-k keytab-file**](#k)

The keytab file to remove the principal(s) from.

[**-r realm**](#r)

A realm to remove all principals for.

[**-d**](#d)

Debug mode. Additional information is displayed.

# [EXAMPLES](#EXAMPLES)

Remove the NFS service principal on the host foo.example.com from /tmp/nfs.keytab.

\# ipa-rmkeytab -p nfs/foo.example.com -k /tmp/nfs.keytab

Remove the ldap service principal on the host foo.example.com from /etc/krb5.keytab.

\# ipa-rmkeytab -p ldap/foo.example.com -k /etc/krb5.keytab

Remove all principals for the realm EXAMPLE.COM.

\# ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab

# [EXIT STATUS](#EXIT_STATUS)

The exit status is 0 on success, nonzero on error.

1 Kerberos initialization failed

2 Memory allocation error

3 Unable to open keytab

4 Unable to parse the principal name

5 Principal name or realm not found in keytab

6 Unable to remove principal from keytab

7 Failed to set cursor

Oct 30 2009 IPA

---

Document: ipa-rmkeytab(1) from freeipa 4.13.4-r3 (Chainguard OS)
Source: https://pagure.io/freeipa.git