1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
.TH "KPROPLOG" "8" "January 06, 2012" "0.0.1" "MIT Kerberos"
.SH NAME
kproplog \- display the contents of the Kerberos principal update log
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
.\" Man page generated from reStructeredText.
.
.SH SYNOPSIS
.sp
\fBkproplog\fP [\fB\-h\fP] [\fB\-e\fP \fInum\fP] [\-v]
.SH DESCRIPTION
.sp
The \fIkproplog\fP command displays the contents of the Kerberos principal
update log to standard output.
It can be used to keep track of the \fIincremental\fP updates
to the principal database, when enabled.
The update log file contains the update log maintained by the \fIkadmind\fP process
on the master KDC server and the \fIkpropd\fP process on the slave KDC servers.
When updates occur, they are logged to this file.
Subsequently any KDC slave configured for \fIincremental\fP updates will request
the current data from the master KDC and update their \fIprincipal.ulog\fP file
with any updates returned.
.sp
The \fIkproplog\fP command can only be run on a KDC server by someone with privileges
comparable to the superuser.
It will display update entries for that server only.
.sp
If no options are specified, the summary of the update log is displayed.
If invoked on the master, all of the update entries are also displayed.
When invoked on a slave KDC server, only a summary of the updates are displayed,
which includes the serial number of the last update received and
the associated time stamp of the last update.
.SH OPTIONS
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.TP
.B \fB\-h\fP
.sp
Display a summary of the update log.
This information includes the database version number, state of the database,
the number of updates in the log, the time stamp of the first and last update,
and the version number of the first and last update entry.
.TP
.B \fB\-e\fP \fInum\fP
.sp
Display the last \fInum\fP update entries in the log.
This is useful when debugging synchronization between KDC servers.
.TP
.B \fB\-v\fP
.sp
Display individual attributes per update. An example of the output generated for one entry:
.sp
.nf
.ft C
Update Entry
Update serial # : 4
Update operation : Add
Update principal : test@EXAMPLE.COM
Update size : 424
Update committed : True
Update time stamp : Fri Feb 20 23:37:42 2004
Attributes changed : 6
Principal
Key data
Password last changed
Modifying principal
Modification time
TL data
.ft P
.fi
.UNINDENT
.UNINDENT
.UNINDENT
.SH ENVIRONMENT
.sp
\fIkproplog\fP uses the following environment variables:
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.IP \(bu 2
.
\fBKRB5_KDC_PROFILE\fP
.UNINDENT
.UNINDENT
.UNINDENT
.SH SEE ALSO
.sp
kpropd(8)
.SH AUTHOR
MIT
.SH COPYRIGHT
2011, MIT
.\" Generated by docutils manpage writer.
.
|
