.\" $Id: ext_srvtab.8,v 1.2 2002/05/19 21:27:56 joda Exp $
.\" Copyright 1989 by the Massachusetts Institute of Technology.
.\"
.\" For copying and distribution information,
.\" please see the file <mit-copyright.h>.
.\"
.Dd February  3, 1998
.Dt EXT_SRVTAB 8
.Os "KTH-KRB"
.Sh NAME
.Nm ext_srvtab
.Nd extract service key files from Kerberos key distribution center database
.Sh SYNOPSIS
.Nm
.Op Fl n
.Op Fl r Ar realm
.Op Ar hostname Ns ...
.Sh DESCRIPTION
.Nm
extracts service key files from the Kerberos key distribution center
(KDC) database.
.Pp
Upon execution, it prompts the user to enter the master key string for
the database.  If the
.Fl n
option is specified, the master key is instead fetched from the master
key cache file.
.Pp
For each
.Ar hostname
specified on the command line, 
.Nm
creates the service key file
.Pa Ar hostname Ns Pa -new-srvtab ,
containing all the entries in the database with an instance field of
Ar hostname .
This new file contains all the keys registered for Kerberos-mediated
service providing programs which use the 
.Xr krb_get_phost 3
principal and instance conventions to run on the host
.Ar hostname .
If the
.Fl r
option is specified, the realm fields in the extracted file will
match the given realm rather than the local realm.
.Sh DIAGNOSTICS
.Bl -tag -width Dv
.It verify_master_key: Invalid master key, does not match database.
The master key string entered was incorrect.
.El
.Sh FILES
.Bl -tag -width Dv
.It Pa Ar hostname Ns Pa -new-srvtab
Service key file generated for
.A hostname
.TP
.It Pa /var/kerberos/principal.pag Ns No , Pa /var/kerberos/principal.dir
DBM files containing database
.TP
.It Pa /.k
Master key cache file.
.El
.Sh SEE ALSO
.Xr read_service_key 3 ,
.Xr krb_get_phost 3