---
name: "kdb_util"
section: "8"
platform: "linux"
package: "kerberos4kth-kdc"
version: "1.2.2-11.2"
release: "Debian 3.1 (Sarge)"
platforms: ["linux"]
url: "https://new.carta.tech/kdb_util"
---

# kdb\_util(8)

Kerberos key distribution center database utility

## NAME

**kdb\_util** – Kerberos key distribution center database utility

## SYNOPSIS

**kdb\_util** *operation* *filename*

## DESCRIPTION

**kdb\_util** allows the Kerberos key distribution center (KDC) database administrator to perform utility functions on the database.

The *operation* must be one of the following:

- **load**

  initializes the KDC database with the records described by the text contained in the file *filename*. Any existing database is overwritten.

- **dump**

  dumps the KDC database into a text representation in the file *filename*.

- **slave\_dump**

  performs a database dump like the **dump** operation, and additionally creates a semaphore file signalling the propagation software that an update is available for distribution to slave KDC databases.

- **merge**

  merges in the entries from *filename* into the database.

- **new\_master\_key**

  prompts for the old and new master key strings, and then dumps the KDC database into a text representation in the file *filename*. The keys in the text representation are encrypted in the new master key.

- **convert\_old\_db**

  prompts for the master key string, and then dumps the KDC database into a text representation in the file *filename*. The existing database is assumed to be encrypted using the old format (encrypted by the key schedule of the master key); the dumped database is encrypted using the new format (encrypted directly with master key).

## DIAGNOSTICS

- verify\_master\_key: Invalid master key, does not match database.

  The master key string entered was incorrect.

## FILES

- */var/kerberos/principal.pag*, */var/kerberos/principal.dir*

  DBM files containing database

- *filename**.ok*

  semaphore file created by *slave\_dump*.