DragonFly On-Line Manual Pages

KPROPLOG(8)                      MIT Kerberos                      KPROPLOG(8)

NAME
       kproplog - display the contents of the Kerberos principal update log

SYNOPSIS
       kproplog [-h] [-e num] [-v] kproplog [-R]

DESCRIPTION
       The kproplog command displays the contents of the KDC database update
       log to standard output.  It can be used to keep track of incremental
       updates to the principal database.  The update log file contains the
       update log maintained by the kadmind(8) process on the primary KDC
       server and the kpropd(8) process on the replica KDC servers.  When
       updates occur, they are logged to this file.  Subsequently any KDC
       replica configured for incremental updates will request the current
       data from the primary KDC and update their log file with any updates
       returned.

       The kproplog command requires read access to the update log file.  It
       will display update entries only for the KDC it runs on.

       If no options are specified, kproplog displays a summary of the update
       log.  If invoked on the primary, kproplog also displays all of the
       update entries.  If invoked on a replica KDC server, kproplog displays
       only a summary of the updates, which includes the serial number of the
       last update received and the associated time stamp of the last update.

OPTIONS

       -R     Reset the update log.  This forces full resynchronization.  If
              used on a replica then that replica will request a full resync.
              If used on the primary then all replicas will request full
              resyncs.

       -h     Display a summary of the update log.  This information includes
              the database version number, state of the database, the number
              of updates in the log, the time stamp of the first and last
              update, and the version number of the first and last update
              entry.

       -e num Display the last num update entries in the log.  This is useful
              when debugging synchronization between KDC servers.

       -v     Display individual attributes per update.  An example of the
              output generated for one entry:

                 Update Entry
                    Update serial # : 4
                    Update operation : Add
                    Update principal : test@EXAMPLE.COM
                    Update size : 424
                    Update committed : True
                    Update time stamp : Fri Feb 20 23:37:42 2004
                    Attributes changed : 6
                          Principal
                          Key data
                          Password last changed
                          Modifying principal
                          Modification time
                          TL data

ENVIRONMENT
       See kerberos(7) for a description of Kerberos environment variables.

SEE ALSO
       kpropd(8), kerberos(7)

AUTHOR
       MIT

COPYRIGHT
       1985-2023, MIT

1.21.2                                                             KPROPLOG(8)