home | help 
KPROPLOG(8)			  MIT Kerberos			     KPROPLOG(8)

NAME
     kproplog - display the contents of the Kerberos principal update log

SYNOPSIS
     kproplog [-h] [-e num] [-v] kproplog [-R]

DESCRIPTION
     The  kproplog  command displays the contents of the KDC database update log
     to standard output.  It can be used to keep track of incremental updates to
     the principal database.  The update log file contains the update log  main-
     tained  by  the  kadmind  process	on the primary KDC server and the kpropd
     process on the replica KDC servers.  When updates occur, they are logged to
     this file.  Subsequently any KDC replica configured for incremental updates
     will request the current data from the primary KDC  and  update  their  log
     file with any updates returned.

     The  kproplog command requires read access to the update log file.  It will
     display update entries only for the KDC it runs on.

     If no options are specified, kproplog displays a summary of the update log.
     If invoked on the primary, kproplog also displays all  of	the  update  en-
     tries.   If  invoked on a replica KDC server, kproplog displays only a sum-
     mary of the updates, which includes the serial number of  the  last  update
     received and the associated time stamp of the last update.

OPTIONS
     -R     Reset  the update log.  This forces full resynchronization.  If used
	    on a replica then that replica will request a full resync.	If  used
	    on the primary then all replicas will request full resyncs.

     -h     Display  a summary of the update log.  This information includes the
	    database version number, state of the database, the  number  of  up-
	    dates  in  the log, the time stamp of the first and last update, and
	    the version number of the first and last update entry.

     -e num
	    Display the last num update entries in the log.  This is useful when
	    debugging synchronization between KDC servers.

     -v     Display individual attributes per update.  An example of the  output
	    generated for one entry:

	       Update Entry
		  Update serial # : 4
		  Update operation : Add
		  Update principal : test@EXAMPLE.COM
		  Update size : 424
		  Update committed : True
		  Update time stamp : Fri Feb 20 23:37:42 2004
		  Attributes changed : 6
			Principal
			Key data
			Password last changed
			Modifying principal
			Modification time
			TL data

ENVIRONMENT
     See kerberos for a description of Kerberos environment variables.

SEE ALSO
     kpropd, kerberos

AUTHOR
     MIT

COPYRIGHT
     1985-2026, MIT

1.22.2								     KPROPLOG(8)
home | help