4514 k5srvutil(1m): The default keytab file is /etc/krb5/krb5.keytab

          --- old/usr/src/man/man1m/k5srvutil.1m
          +++ new/usr/src/man/man1m/k5srvutil.1m

   1    1  '\" te
   2    2  .\" Copyright (c) 2006, Sun Microsystems, Inc. All Rights Reserved
   3    3  .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License").  You may not use this file except in compliance with the License.
   4    4  .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing.  See the License for the specific language governing permissions and limitations under the License.
   5    5  .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE.  If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
   6    6  .TH K5SRVUTIL 1M "Aug 29, 2006"
   7    7  .SH NAME
   8    8  k5srvutil \- host key table (keytab) manipulation utility
   9    9  .SH SYNOPSIS
  10   10  .LP
  11   11  .nf
  12   12  \fB/usr/sbin/k5srvutil\fR \fIoperation\fR [\fB-ik\fR] [\fB-f\fR \fIfilename\fR]
  13   13  .fi
  14   14  
  15   15  .SH DESCRIPTION
  16   16  .sp
  17   17  .LP
  18   18  The \fBk5srvutil\fR command allows a system manager to list or change keys
  19   19  currently in his keytab or to add new keys to the keytab.
  20   20  .sp
  21   21  .LP
  22   22  The operand \fIoperation\fR must be one of the following:
  23   23  .sp
  24   24  .ne 2
  25   25  .na
  26   26  \fB\fBlist\fR\fR
  27   27  .ad
  28   28  .RS 10n
  29   29  Lists the keys in a keytab, showing version number and principal name.
  30   30  .RE
  31   31  
  32   32  .sp
  33   33  .ne 2
  34   34  .na
  35   35  \fB\fBchange\fR\fR
  36   36  .ad
  37   37  .RS 10n
  38   38  Changes all the keys in the keytab to new randomly-generated keys, updating the
  39   39  keys in the Kerberos server's database to match those by using the \fBkadmin\fR
  40   40  protocol. If a key's version number does not match the version number stored in
  41   41  the Kerberos server's database, the operation fails. The old keys are retained
  42   42  so that existing tickets continue to work. If the \fB-i\fR flag is specified,
  43   43  \fBk5srvutil\fR prompts for \fByes\fR or \fBno\fR before changing each key. If
  44   44  the \fB-k\fR option is used, the old and new keys are displayed.
  45   45  .RE
  46   46  
  47   47  .sp
  48   48  .ne 2
  49   49  .na
  50   50  \fB\fBdelold\fR\fR
  51   51  .ad
  52   52  .RS 10n
  53   53  Deletes keys that are not the most recent version from the keytab. This
  54   54  operation should be used at some point after a change operation to remove old
  55   55  keys. If the \fB-i\fR flag is specified, \fBk5srvutil\fR asks the user whether
  56   56  the old keys associated with each principal should be removed.
  57   57  .RE
  58   58  
  59   59  .sp

  60   60  .ne 2
  61   61  .na
  62   62  \fB\fBdelete\fR\fR
  63   63  .ad
  64   64  .RS 10n
  65   65  Deletes particular keys in the keytab, interactively prompting for each key.
  66   66  .RE
  67   67  
  68   68  .sp
  69   69  .LP
  70      -In all cases, the default keytab file is \fB/etc/krb5.keytab\fR file unless
       70 +In all cases, the default keytab file is \fB/etc/krb5/krb5.keytab\fR file unless
  71   71  this is overridden by the \fB-f\fR option.
  72   72  .sp
  73   73  .LP
  74   74  \fBk5srvutil\fR uses the \fBkadmin\fR(1M) program to edit the keytab in place.
  75   75  However, old keys are retained, so they are available in case of failure.
  76   76  .SH OPTIONS
  77   77  .sp
  78   78  .LP
  79   79  The following options are supported:
  80   80  .sp
  81   81  .ne 2
  82   82  .na
  83   83  \fB\fB-f\fR \fIfilename\fR\fR
  84   84  .ad
  85   85  .RS 15n
  86      -Specify a keytab file other than the default file, \fB/etc/krb5.keytab\fR.
       86 +Specify a keytab file other than the default file, \fB/etc/krb5/krb5.keytab\fR.
  87   87  .RE
  88   88  
  89   89  .sp
  90   90  .ne 2
  91   91  .na
  92   92  \fB\fB-i\fR\fR
  93   93  .ad
  94   94  .RS 15n
  95   95  Prompts user before changing keys when using the \fBchange\fR or \fBdelold\fR
  96   96  operands.

  97   97  .RE
  98   98  
  99   99  .sp
 100  100  .ne 2
 101  101  .na
 102  102  \fB\fB-k\fR\fR
 103  103  .ad
 104  104  .RS 15n
 105  105  Displays old and new keys when using the \fBchange\fR operand.
 106  106  .RE
 107  107  
 108  108  .SH ATTRIBUTES
 109  109  .sp
 110  110  .LP
 111  111  See \fBattributes\fR(5) for descriptions of the following attributes:
 112  112  .sp
 113  113  
 114  114  .sp
 115  115  .TS
 116  116  box;
 117  117  c | c
 118  118  l | l .
 119  119  ATTRIBUTE TYPE  ATTRIBUTE VALUE
 120  120  _
 121  121  Interface Stability     Committed
 122  122  .TE
 123  123  
 124  124  .SH SEE ALSO
 125  125  .sp
 126  126  .LP
 127  127  \fBktutil\fR(1), \fBkadmin\fR(1M), \fBattributes\fR(5)

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX