---
name: "Wallet::Kadmin::Heimdal"
section: "3pm"
platform: "linux"
package: "krb5-wallet-server"
version: "1.7"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/Wallet::Kadmin::Heimdal"
---

# Wallet::Kadmin::Heimdal(3pm)

Wallet Kerberos administration API for Heimdal

## NAME

Wallet::Kadmin::Heimdal - Wallet Kerberos administration API for Heimdal

## SYNOPSIS

```
    my $kadmin = Wallet::Kadmin::Heimdal->new;
    $kadmin->create ('host/foo.example.com');
    $kadmin->keytab_rekey ('host/foo.example.com', 'keytab',
                           'aes256-cts-hmac-sha1-96');
    my $data = $kadmin->keytab ('host/foo.example.com');
    my $exists = $kadmin->exists ('host/oldshell.example.com');
    $kadmin->destroy ('host/oldshell.example.com') if $exists;
```

## DESCRIPTION

Wallet::Kadmin::Heimdal implements the Wallet::Kadmin API for Heimdal, providing an interface to create and delete principals and create keytabs. It provides the API documented in Wallet::Kadmin for a Heimdal KDC.

To use this class, several configuration parameters must be set.  See "KEYTAB OBJECT CONFIGURATION" in Wallet::Config for details.

## FILES

- KEYTAB\_TMP/keytab.\<pid\>

  The keytab is created in this file and then read into memory.  KEYTAB\_TMP is set in the wallet configuration, and \<pid\> is the process ID of the current process.  The file is unlinked after being read.

## SEE ALSO

[**kadmin**(8)](/kadmin/8.md), **Wallet::Config**(3), **Wallet::Kadmin**(3), **Wallet::Object::Keytab**(3), [**wallet-backend**(8)](/wallet-backend/8.md)

This module is part of the wallet system.  The current version is available from \<https://www.eyrie.org/~eagle/software/wallet/\>.

## AUTHORS

Russ Allbery \<eagle@eyrie.org\> and Jon Robertson \<jonrober@stanford.edu\>.