Why k5srvutil is present when ktutil can do its job?

Greg Hudson ghudson at mit.edu
Wed Oct 29 21:52:33 EDT 2014


On 10/29/2014 07:14 PM, Rufe Glick wrote:
> Kerberos 5 client side package supplied me with two similar utilities: ktutil and k5srvutil. I believe that there is no operation that k5srvutil script does that ktutil can't do. So why do package maintainers keep both of them?

There is no ktutil equivalent for "k5srvutil change", which I believe is
the primary reason for k5srvutil to exist.

k5srvutil can't do anything that kadmin can't do, since it's just a
shell script wrapper around kadmin.  But it's easier to run "k5srvutil
change" or "k5srvutil delold" than the equivalent kadmin commands.


More information about the Kerberos mailing list