NAME

       kproplog - display the contents of the Kerberos principal update log

SYNOPSIS

       kproplog [-h] [-e num] [-v] kproplog [-R]

DESCRIPTION

       The  kproplog  command  displays  the  contents of the KDC database update log to standard
       output.  It can be used to keep track of incremental updates to  the  principal  database.
       The  update  log  file contains the update log maintained by the kadmind(8) process on the
       primary KDC server and the kpropd(8) process on the replica  KDC  servers.   When  updates
       occur,  they  are  logged  to  this  file.   Subsequently  any  KDC replica configured for
       incremental updates will request the current data from the primary KDC  and  update  their
       log file with any updates returned.

       The  kproplog command requires read access to the update log file.  It will display update
       entries only for the KDC it runs on.

       If no options are specified, kproplog displays a summary of the update log.  If invoked on
       the  primary,  kproplog  also displays all of the update entries.  If invoked on a replica
       KDC server, kproplog displays only a summary of the updates,  which  includes  the  serial
       number of the last update received and the associated time stamp of the last update.

OPTIONS

       -R     Reset  the  update  log.  This forces full resynchronization.  If used on a replica
              then that replica will request a full resync.  If used  on  the  primary  then  all
              replicas will request full resyncs.

       -h     Display  a  summary  of  the  update  log.   This information includes the database
              version number, state of the database, the number of updates in the log,  the  time
              stamp  of  the  first and last update, and the version number of the first and last
              update entry.

       -e num Display the last num update entries in the log.   This  is  useful  when  debugging
              synchronization between KDC servers.

       -v     Display  individual  attributes per update.  An example of the output generated for
              one entry:

                 Update Entry
                    Update serial # : 4
                    Update operation : Add
                    Update principal : test@EXAMPLE.COM
                    Update size : 424
                    Update committed : True
                    Update time stamp : Fri Feb 20 23:37:42 2004
                    Attributes changed : 6
                          Principal
                          Key data
                          Password last changed
                          Modifying principal
                          Modification time
                          TL data

ENVIRONMENT

       See kerberos(7) for a description of Kerberos environment variables.

SEE ALSO

       kpropd(8), kerberos(7)

AUTHOR

       MIT

COPYRIGHT

       1985-2021, MIT