Creating KDC database in a non-interactive script?

Greg Hudson ghudson at mit.edu
Wed Sep 10 10:25:15 EDT 2014


On 09/10/2014 09:59 AM, Robert Levas wrote:
> It is possible to create the KDC database from an non-interactive (Linux,
> for now) script?  I am trying to automate the installation of a KDC and am
> failing to get past the database creation phase since kdb5_util create [-s]
> appears to not have an option to supply the master password on the command
> line.

It's the -P option.  It's documented in the man page but apparently not
in the usage message; I will submit a fix.

Be aware that using the -P option can leak the master password to other
users on the host via the process list.


More information about the Kerberos mailing list