kdb5_util -b7 dump format

Jerry Shipman jes59 at cornell.edu
Mon Dec 10 13:23:44 EST 2018


Hello,
I'm wondering if someone can help me better understand the kdb5_util dump format.
I'm using the -b7 format flag.
Does this have the historical keys in it (i.e. from password history setting)?
If so, are they encrypted with the history key (and then the master key on top of that)?
How can I tell by looking, which ones are the current keys vs the historical keys? I think the kvno is in there somewhere?
I just want to make sure I am reading this right.

Thank you for your help,
Jerry


More information about the Kerberos mailing list