---
name: "krb524d"
section: "8"
platform: "linux"
package: "krb5-kdc"
version: "1.6.dfsg.4~beta1-5lenny7"
release: "Debian 5.0 (Lenny)"
platforms: ["linux"]
url: "https://new.carta.tech/krb524d"
---

# krb524d(8)

Version 5 to Version 4 Credentials Conversion Daemon

## NAME

krb524d - Version 5 to Version 4 Credentials Conversion Daemon

## SYNOPSIS

**krb524d** \[ **-m\[aster\]** \| **-k\[eytab\]** \] \[ **-r** *realm* \] \[ **-nofork** \] \[ **-p** *portnum* \]\

## DESCRIPTION

*krb524d* is the Kerberos Version 5 to Version 4 Credentials Conversion daemon.   It works in conjuction with a krb5kdc to allow clients to acquire Kerberos  version 4 tickets from Kerberos version 5 tickets without specifying a password.

## OPTIONS

- **-m\[aster\]**

  Use the KDC database to convert credentials.  This option cannot be combined with **-k\[eytab\]**.

- **-k\[eytab\]**

  Use the default keytab to convert credentials. This option cannot be combined with **-m\[aster\]**.

- **-r** *realm*

  Convert credentials for *realm*; by default the realm returned by *krb5\_default\_local\_realm*(3) is used.

- **-nofork**

  specifies that krb524d not fork on launch.  Useful for debugging purposes.

- **-p** *portnum*

  specifies the default UDP port number which krb524d should listen on for Kerberos 524 requests.  This value is used when no port is specified in the KDC profile and when no port is specified in the Kerberos configuration file. If no value is available, then the value in /etc/services for service "krb524" is used.

## SEE ALSO

[kerberos(1)](/kerberos/1.md), [krb5kdc(8)](/krb5kdc/8.md), [kdb5\_util(8)](/kdb5_util/8.md), [kdc.conf(5)](/kdc.conf/5.md)