Creating KDC database in a non-interactive script?

Robert Levas rlevas at hortonworks.com
Wed Sep 10 12:39:03 EDT 2014


I thought that I tried -P and it didn’t seem to work, but obviously I was incorrect. My apologies.

Thanks for the help,

Rob


On Sep 10, 2014, at 10:25 AM, Greg Hudson <ghudson at mit.edu> wrote:

> On 09/10/2014 09:59 AM, Robert Levas wrote:
>> It is possible to create the KDC database from an non-interactive (Linux,
>> for now) script?  I am trying to automate the installation of a KDC and am
>> failing to get past the database creation phase since kdb5_util create [-s]
>> appears to not have an option to supply the master password on the command
>> line.
> 
> It's the -P option.  It's documented in the man page but apparently not
> in the usage message; I will submit a fix.
> 
> Be aware that using the -P option can leak the master password to other
> users on the host via the process list.


-- 
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to 
which it is addressed and may contain information that is confidential, 
privileged and exempt from disclosure under applicable law. If the reader 
of this message is not the intended recipient, you are hereby notified that 
any printing, copying, dissemination, distribution, disclosure or 
forwarding of this communication is strictly prohibited. If you have 
received this communication in error, please contact the sender immediately 
and delete it from your system. Thank You.



More information about the Kerberos mailing list