keytab

The Qshell command keytab manages a key table.

Syntax

keytab add principal [-p password] [-v version] [-k keytab] keytab delete principal [-v version] [-k keytab] keytab list [principal] [-k keytab]

Default public authority: *USE

Options

-k
The key table name. If this option is not specified, the default key table is used.
-p
Specify the password. If this option is not specified, users are prompted to enter the password when they add an entry to the key table.
-v
The key version number. When you add a key, if this option is not specified, the next version number is assigned. When you delete a key, if this option is not specified, all keys for the principal are deleted.
principal
The principal name. When you list the key table, if this option is not specified, all principals are displayed.

Authorities

Object referred to Authority required
Each directory in the path name preceding the target keytab file to be opened *X
Parent directory of the target keytab file when add is specified, if the keytab file does not already exist *WX
Keytab file when list is specified *R
Target keytab file when add or delete is specified *RW
Each directory in the paths to the configuration files *X
Configuration files *R

Messages

  • You must specify add, delete, list, or merge.
  • command_option is not a valid command option.
  • command_option_one and command_option_two cannot be specified together.
  • option_value option is not valid for request_name request.
  • The option_name option requires a value.
  • Unable to parse principal name.
  • You must specify the principal name.
  • Unable to read password.
  • No default key table found.
  • Unable to resolve key table key_table.
  • Unable to read entry from key table key_table.
  • Unable to remove entry from key table key_table.
  • Unable to add entry to key table key_table.
  • No entries found for principal principal_name.
  • Value is not a valid number.
  • The key version must be between 1 and 255.
  • Key version key_version not found for principal principal_name.

For an example of how this command is used, see Managing keytab files.