How to view KVNO on slave

Russ Allbery eagle at eyrie.org
Sat Oct 7 12:27:00 EDT 2023


Mike via Kerberos <kerberos at mit.edu> writes:

> I'm surmising that the issue might be that the service principle may not
> have replicated corerctly to the slave server, which is used by the
> Apache host.  I can see the ticket details on the master using
> kadmin.local and getprinc and I can see the keytab info using ktutil.
> My question is this: How does one view the KVNO in the Slave DB?  I
> imaine it's probably available via kdb5_util dump but unfortunatly I
> have not found any documents explaining the fields in the dump.

You can use kadmin.local on the slave the same way that you use it on the
master, I'm fairly sure.  It's been a while since I've done this, but I'm
pretty sure the database is the same and the tool doesn't have any idea
whether you're running it on a master or a slave.

I would expect you to get replication errors if there was a replication
problem.  If you're only doing incremental replication and you think
something may have gone wrong, you can always do a full replication, which
guarantees that the slave is identical to the master.

-- 
Russ Allbery (eagle at eyrie.org)             <https://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list