---
name: "pam_krb5_migrate"
section: "7"
platform: "linux"
package: "libpam-krb5-migrate-heimdal"
version: "0.0.11-2"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/pam_krb5_migrate"
---

# pam\_krb5\_migrate(7)

Kerberos 5 Migration PAM module

## NAME

pam\_krb5\_migrate - Kerberos 5 Migration PAM module

## SYNOPSIS

auth            optional	pam\_krb5\_migrate.so

## DESCRIPTION

**pam\_krb5\_migrate** is a stackable authentication module that takes a username and password from an earlier module in the stack, and attempts to transparently add them to a Kerberos realm using the Kerberos 5 kadmin service.

The module can be used to ease the administrative burdens of migrating a large installed userbase from pre-existing authentication methods to a Kerberos-based setup.

## OPTIONS

The following options may be passed to the authentication module:

- **debug**

  [**syslog**(3)](/syslog/3.md) debugging information at **LOG\_DEBUG** level.

- **keytab=\<file\>**

  use alternate keytab for authentication (default is /etc/security/pam\_krb5.keytab).

- **min\_uid=\<uid\>**

  don't add principals for uids lower than \<uid\>.  (default is 100)

- **principal=\<name\>**

  use the key for \<name\> instead of the default pam\_migrate/\<hostname\> key

- **realm=\<REALM\>**

  update the database for a realm other than the default realm.

## AUTHOR

pam\_krb5\_migrate was written by Steve Langasek \<vorlon@netexpress.net\>. This  manpage was assembled by Jelmer Vernooij \<jelmer@samba.org\>.

## SEE ALSO

[**kadmin**(1)](/kadmin/1.md), [**pam\_krb5**(5)](/pam_krb5/5.md), [**pam**(3)](/pam/3.md), **libpam**(4).