NAME

       kproplog - display the contents of the Kerberos principal update log

SYNOPSIS

       kproplog [-h] [-e num] [-v] kproplog [-R]

DESCRIPTION

       The  kproplog  command  displays  the  contents of the KDC database update log to standard
       output.  It can be used to keep track of incremental updates to  the  principal  database.
       The  update  log  file contains the update log maintained by the kadmind(8) process on the
       master KDC server and the kpropd(8) process on the slave KDC servers.  When updates occur,
       they  are  logged  to  this  file.   Subsequently any KDC slave configured for incremental
       updates will request the current data from the master KDC and update their log  file  with
       any updates returned.

       The  kproplog command requires read access to the update log file.  It will display update
       entries only for the KDC it runs on.

       If no options are specified, kproplog displays a summary of the update log.  If invoked on
       the  master,  kproplog also displays all of the update entries.  If invoked on a slave KDC
       server, kproplog displays only a summary of the updates, which includes the serial  number
       of the last update received and the associated time stamp of the last update.

OPTIONS

       -R     Reset the update log.  This forces full resynchronization.  If used on a slave then
              that slave will request a full resync.  If used on the master then all slaves  will
              request full resyncs.

       -h     Display  a  summary  of  the  update  log.   This information includes the database
              version number, state of the database, the number of updates in the log,  the  time
              stamp  of  the  first and last update, and the version number of the first and last
              update entry.

       -e num Display the last num update entries in the log.   This  is  useful  when  debugging
              synchronization between KDC servers.

       -v     Display  individual  attributes per update.  An example of the output generated for
              one entry:

                 Update Entry
                    Update serial # : 4
                    Update operation : Add
                    Update principal : test@EXAMPLE.COM
                    Update size : 424
                    Update committed : True
                    Update time stamp : Fri Feb 20 23:37:42 2004
                    Attributes changed : 6
                          Principal
                          Key data
                          Password last changed
                          Modifying principal
                          Modification time
                          TL data

ENVIRONMENT

       kproplog uses the following environment variables:

       • KRB5_KDC_PROFILE

SEE ALSO

       kpropd(8)

AUTHOR

       MIT

COPYRIGHT

       1985-2017, MIT