.\" $Source: /mit/kerberos/src/man/RCS/kadmin.8,v $ .\" $Author: steiner $ .\" $Header: kadmin.8,v 4.1 89/01/24 09:19:33 steiner Exp $ .\" Copyright 1989 by the Massachusetts Institute of Technology. .\" .\" For copying and distribution information, .\" please see the file . .\" .TH KADMIN 8 "Kerberos Version 4.0" "MIT Project Athena" .SH NAME kadmin \- network utility for Kerberos database administration .SH SYNOPSIS .B kadmin .SH DESCRIPTION This utility provides a unified administration interface to the Kerberos master database. Kerberos administrators use .I kadmin to register new users and services to the master database, and to change information about existing database entries. For instance, an administrator can use .I kadmin to change a user's Kerberos password. A Kerberos administrator is a user with an ``admin'' instance whose name appears on one of the Kerberos administration access control lists. The .I kadmin program communicates over the network with the .I kadmind program, which runs on the machine housing the Kerberos master database. The .I kadmind creates new entries and makes modifications to the database. When you enter the .I kadmin command, the program displays a message that welcomes you and explains how to ask for help. Then .I kadmin waits for you to enter commands (which are described below). It then asks you for your .I admin password before accessing the database. Use the .I add_new_key (or .I ank for short) command to register a new principal with the master database. The command requires one argument, the principal's name. You are asked to enter your .I admin password, then prompted twice to enter the principal's new password. Use the .I add_new_instance (ani) command to add a new principal with a non-null instance to the master database. The command requires two arguments, the principal's name, and the principal's instance. You are asked to enter your .I admin password, then prompted twice to enter the principal's new password. Use the .I change_password (cpw) to change a principal's Kerberos password. The command requires one argument, the principal's name. You are asked to enter your .I admin password, then prompted twice to enter the principal's new password. Use the .I change_instance_key (cik) to change the Kerberos password for a principal with a non-null instance. The command requires two arguments, the principal's name, and the principal's instance. You are asked to enter your .I admin password, then prompted twice to enter the principal's new password. Use the .I change_admin_password (cap) to change your .I admin instance password. This command requires no arguments. It prompts you for your old .I admin password, then prompts you twice to enter the new .I admin password. Use the .I list_requests (lr) command to get a list of possible commands. Use the .I help command to display .IR kadmin's various help messages. If entered without an argument, .I help displays a general help message. You can get detailed information on specific .I kadmin commands by entering .I help .IR command_name . To quit the program, type .IR quit . .SH BUGS .I kadmin currently does not allow addition, retrieval, or modification of principals with non-null instances. .PP The user interface is primitive, and the command names could be better. .SH "SEE ALSO" kerberos(1) .br ``A Subsystem Utilities Package for UNIX'' by Ken Raeburn .SH AUTHOR Jeffrey I. Schiller, MIT Project Athena