Blame doc/admin/admin_commands/kproplog.rst

Packit fd8b60
.. _kproplog(8):
Packit fd8b60
Packit fd8b60
kproplog
Packit fd8b60
========
Packit fd8b60
Packit fd8b60
SYNOPSIS
Packit fd8b60
--------
Packit fd8b60
Packit fd8b60
**kproplog** [**-h**] [**-e** *num*] [-v]
Packit fd8b60
**kproplog** [-R]
Packit fd8b60
Packit fd8b60
Packit fd8b60
DESCRIPTION
Packit fd8b60
-----------
Packit fd8b60
Packit fd8b60
The kproplog command displays the contents of the KDC database update
Packit fd8b60
log to standard output.  It can be used to keep track of incremental
Packit fd8b60
updates to the principal database.  The update log file contains the
Packit fd8b60
update log maintained by the :ref:`kadmind(8)` process on the master
Packit fd8b60
KDC server and the :ref:`kpropd(8)` process on the replica KDC
Packit fd8b60
servers.  When updates occur, they are logged to this file.
Packit fd8b60
Subsequently any KDC replica configured for incremental updates will
Packit fd8b60
request the current data from the master KDC and update their log file
Packit fd8b60
with any updates returned.
Packit fd8b60
Packit fd8b60
The kproplog command requires read access to the update log file.  It
Packit fd8b60
will display update entries only for the KDC it runs on.
Packit fd8b60
Packit fd8b60
If no options are specified, kproplog displays a summary of the update
Packit fd8b60
log.  If invoked on the master, kproplog also displays all of the
Packit fd8b60
update entries.  If invoked on a replica KDC server, kproplog displays
Packit fd8b60
only a summary of the updates, which includes the serial number of the
Packit fd8b60
last update received and the associated time stamp of the last update.
Packit fd8b60
Packit fd8b60
Packit fd8b60
OPTIONS
Packit fd8b60
-------
Packit fd8b60
Packit fd8b60
**-R**
Packit fd8b60
    Reset the update log.  This forces full resynchronization.  If
Packit fd8b60
    used on a replica then that replica will request a full resync.
Packit fd8b60
    If used on the master then all replicas will request full resyncs.
Packit fd8b60
Packit fd8b60
**-h**
Packit fd8b60
    Display a summary of the update log.  This information includes
Packit fd8b60
    the database version number, state of the database, the number of
Packit fd8b60
    updates in the log, the time stamp of the first and last update,
Packit fd8b60
    and the version number of the first and last update entry.
Packit fd8b60
Packit fd8b60
**-e** *num*
Packit fd8b60
    Display the last *num* update entries in the log.  This is useful
Packit fd8b60
    when debugging synchronization between KDC servers.
Packit fd8b60
Packit fd8b60
**-v**
Packit fd8b60
    Display individual attributes per update.  An example of the
Packit fd8b60
    output generated for one entry::
Packit fd8b60
Packit fd8b60
        Update Entry
Packit fd8b60
           Update serial # : 4
Packit fd8b60
           Update operation : Add
Packit fd8b60
           Update principal : test@EXAMPLE.COM
Packit fd8b60
           Update size : 424
Packit fd8b60
           Update committed : True
Packit fd8b60
           Update time stamp : Fri Feb 20 23:37:42 2004
Packit fd8b60
           Attributes changed : 6
Packit fd8b60
                 Principal
Packit fd8b60
                 Key data
Packit fd8b60
                 Password last changed
Packit fd8b60
                 Modifying principal
Packit fd8b60
                 Modification time
Packit fd8b60
                 TL data
Packit fd8b60
Packit fd8b60
Packit fd8b60
ENVIRONMENT
Packit fd8b60
-----------
Packit fd8b60
Packit fd8b60
See :ref:`kerberos(7)` for a description of Kerberos environment
Packit fd8b60
variables.
Packit fd8b60
Packit fd8b60
Packit fd8b60
SEE ALSO
Packit fd8b60
--------
Packit fd8b60
Packit fd8b60
:ref:`kpropd(8)`, :ref:`kerberos(7)`