This is the one I’ve always used.
You can grep out specific entries and hand-edit them if you need to make
changes not otherwise supported by the admin interface. Also you can use this
method to move full-strength cross-realm keys between installations.
It’s also a great way to undo an otherwise-dangerous experiment. ;-)
> On Apr 2, 2017, at 10:44 AM, Roland C. Dowdeswell
> <roland.dowdesw...@twosigma.com> wrote:
> On Sat, Apr 01, 2017 at 04:59:56PM -0700, Adam Lewenberg wrote:
>> I am looking for a quick way to get a snapshot of the Kerberos
>> database file.
> In addition to the other methods suggested already, you could just:
> $ kadmin -l dump <file>
> which can be later loaded with:
> $ kadmin -l load <file>
> Or one could even grep the entries out that you wish to restore and pass
> them to:
> $ kadmin -l merge <file>
> if, say, you wanted to revert some entries to the dump file that you
> created using the cronjob that we all generally have in place.
> Roland C. Dowdeswell
Personal email. hbh...@oxy.edu