OS Manuals

/usr/bin/kdb5_util

The KDC and related programs for Kerberos 5

From krb5-server 1.22.2-r6 (os), captured 2026-11-06 by running kdb5_util --help (exit 1). permalink

Usage: kdb5_util [-r realm] [-d dbname] [-k mkeytype] [-kv mkeyVNO]
	        [-M mkeyname] [-m] [-sf stashfilename] [-P password]
	        [-x db_args]* cmd [cmd_options]
	create  [-s]
	destroy [-f]
	stash   [-f keyfile]
	dump    [-b7|-r13|-r18] [-verbose]
	        [-mkey_convert] [-new_mkey_file mkey_file]
	        [-rev] [-recurse] [filename [princs...]]
	load    [-b7|-r13|-r18] [-hash] [-verbose] [-update] filename
	ark     [-e etype_list] principal
	add_mkey [-e etype] [-s]
	use_mkey kvno [time]
	list_mkeys
	update_princ_encryption [-f] [-n] [-v] [princ-pattern]
	purge_mkeys [-f] [-n] [-v]
	tabdump [-H] [-c] [-e] [-n] [-o outfile] dumptype

where,
	[-x db_args]* - any number of database specific arguments.
			Look at each database documentation for supported arguments
Options (9)
OptionDescriptionSource
-r realmspecifies the Kerberos realm of the database.man
-d dbnamespecifies the name under which the principal database is stored;man
-k mkeytypespecifies the key type of the master key in the database.man
-kv mkeyVNOSpecifies the version number of the master key in the database;man
-M mkeynameprincipal name for the master key in the database.man
-mspecifies that the master database password should be read from the keyboard rather than fetched from a file on disk.man
-sf stash_filespecifies the stash filename of the master database password.man
-P passwordspecifies the master database password.man
-x db_argsspecifies database-specific options.man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.