This is the one I’ve always used. You can grep out specific entries and hand-edit them if you need to make changes not otherwise supported by the admin interface. Also you can use this method to move full-strength cross-realm keys between installations.
It’s also a great way to undo an otherwise-dangerous experiment. ;-) > On Apr 2, 2017, at 10:44 AM, Roland C. Dowdeswell > <[email protected]> wrote: > > On Sat, Apr 01, 2017 at 04:59:56PM -0700, Adam Lewenberg wrote: >> > >> I am looking for a quick way to get a snapshot of the Kerberos >> database file. > > In addition to the other methods suggested already, you could just: > > $ kadmin -l dump <file> > > which can be later loaded with: > > $ kadmin -l load <file> > > Or one could even grep the entries out that you wish to restore and pass > them to: > > $ kadmin -l merge <file> > > if, say, you wanted to revert some entries to the dump file that you > created using the cronjob that we all generally have in place. > > -- > Roland C. Dowdeswell Personal email. [email protected]
