kadm5.acl "e" permission

[Greg Hudson]

On 2/7/25 08:58, Stefan Kania wrote:
> in the kadm5.acl the "*" or the "x" gives all permission but not the 
> permission to extract the principal keys for this it the "e" permission. 
> Can some please explain to me how can I extract the principal key if I 
> have the "e" permission. I can't find anything that explain how to do it.

The kadmin "ktadd -norandkey" command will extract principal keys to a 
keytab file without generating new keys as it normally does.