Loading the Kerberos Database

The kdb_load utility loads the database with the principal entries from a database dump text file. This utility overrides the existing database entries with the corresponding entries present in the dump file. Principals in the existing database that are absent in the dump file are not changed or removed.

HP recommends that you run the kdb_load utility on the primary security servers only. If the propagation is configured correctly, kdb_load securely copies the database entries to each secondary security server present on your network.

The general syntax for loading the Kerberos database is as follows:

kdb_load [-f filename]

The kdb_dump utility uses the following options:

-f filename

Specifies the database dump text file to copy into the database.

-e enctype

Specifies the encryption and checksum mechanism of the primary principal. Following are the encryption types that are supported:

3DES or 5: DES-CBC-MD5 (default)
DES-MD5 or 3: DES-CBC-MD5
DES-CRC or 1: DES-CBC-CRC




	NOTE: The default, `DES3-CBC-MD5`, will be set as the encryption type if you do not specify any of the encryption types previously mentioned.

Following is an example of using kdb_load:

shell% kdb_dump -f <filename>

Loading the Kerberos Database

Technical documentation

» Table of Contents

» Glossary

» Index