Creating KDC database in a non-interactive script?
Robert Levas
rlevas at hortonworks.com
Wed Sep 10 12:39:03 EDT 2014
I thought that I tried -P and it didn’t seem to work, but obviously I was incorrect. My apologies.
Thanks for the help,
Rob
On Sep 10, 2014, at 10:25 AM, Greg Hudson <ghudson at mit.edu> wrote:
> On 09/10/2014 09:59 AM, Robert Levas wrote:
>> It is possible to create the KDC database from an non-interactive (Linux,
>> for now) script? I am trying to automate the installation of a KDC and am
>> failing to get past the database creation phase since kdb5_util create [-s]
>> appears to not have an option to supply the master password on the command
>> line.
>
> It's the -P option. It's documented in the man page but apparently not
> in the usage message; I will submit a fix.
>
> Be aware that using the -P option can leak the master password to other
> users on the host via the process list.
--
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to
which it is addressed and may contain information that is confidential,
privileged and exempt from disclosure under applicable law. If the reader
of this message is not the intended recipient, you are hereby notified that
any printing, copying, dissemination, distribution, disclosure or
forwarding of this communication is strictly prohibited. If you have
received this communication in error, please contact the sender immediately
and delete it from your system. Thank You.
More information about the Kerberos
mailing list