.\" $Id: kdb_util.8,v 1.2 2002/05/19 21:47:51 joda Exp $
.\" Copyright 1989 by the Massachusetts Institute of Technology.
.\"
.\" For copying and distribution information,
.\" please see the file <mit-copyright.h>.
.\"
.Dd April 2, 1997
.Dt KDB_INIT 8
.Os KTH-KRB
.Sh NAME
.Nm kdb_util
.Nd Kerberos key distribution center database utility
.Sh SYNOPSIS
.Nm
.Ar operation Pa Ar filename
.Sh DESCRIPTION
.Nm
allows the Kerberos key distribution center (KDC) database administrator to
perform utility functions on the database.
.Pp
The
.Ar operation
must be one of the following:
.Bl -tag -width new_master_key
.It Ic load
initializes the KDC database with the records described by the
text contained in the file
.Pa filename .
Any existing database is overwritten.
.It Ic dump
dumps the KDC database into a text representation in the file
.Pa filename .
.It Ic slave_dump
performs a database dump like the
.Ic dump
operation, and additionally creates a semaphore file signalling the
propagation software that an update is available for distribution to
slave KDC databases.
.It Ic merge
merges in the entries from
.Pa filename
into the database.
.It Ic new_master_key
prompts for the old and new master key strings, and then dumps the KDC
database into a text representation in the file
.Pa filename .
The keys in the text representation are encrypted in the new master key.
.It Ic convert_old_db
prompts for the master key string, and then dumps the KDC database into
a text representation in the file
.Pa filename .
The existing database is assumed to be encrypted using the old format
(encrypted by the key schedule of the master key); the dumped database
is encrypted using the new format (encrypted directly with master key).
.El
.Sh DIAGNOSTICS
.Bl -tag -width Dv
.It verify_master_key: Invalid master key, does not match database.
The master key string entered was incorrect.
.El
.Sh FILES
.Bl -tag -width Dv
.It Pa /var/kerberos/principal.pag Ns No , Pa /var/kerberos/principal.dir
DBM files containing database
.It Pa Ar filename Ns Pa .ok
semaphore file created by
.Ar slave_dump .
.El