IBM RS/6000 SP, Руководство по определению проблем

Страница: 101 / 316

This soft copy for use by IBM employees only.
root@sp21cw0 / > klist
Ticket file:
/tmp/tkt0
Principal: root.admin@SP21CW0
Issued Expires Principal
Apr 26 14:59:45 May 26 14:59:45 krbtgt.SP21CW0@SP21CW0
Apr 26 15:00:10 May 26 15:00:10 hardmon.sp21cw0@SP21CW0
Apr 26 15:38:50 May 26 15:38:50 rcmd.sp21n01@SP21CW0
Apr 26 15:38:50 May 26 15:38:50 rcmd.sp21n02@SP21CW0
Apr 26 15:38:50 May 26 15:38:50 rcmd.sp21n03@SP21CW0
Figure 32. Example of klist Output
The output lists the location of the principal
′
s current cache file, as well as the
principal
′
s full name. The first ticket is the ticketgranting ticket. The service
tickets are for the System Monitor service (hardmon) and for the SP Remote
Command service (rcmd) on nodes 1, 2, and 3.
The command
klist -srvtab
displays the local instances of services and their
private key versions found in the server key table (usually /etc/krb-srvtab).
Following is an example of the output of the
klist -srvtab
command.
root@sp21cw0 / > klist -srvtab
Server key file:
/etc/krb-srvtab
Service Instance Realm Key Version
------------------------------------------------------
hardmon sp21cw0 SP21CW0 1
rcmd
sp21cw0 SP21CW0 1
rcmd sp21tr0 SP21CW0 1
hardmon sp21tr0 SP21CW0 1
Figure 33. Example of klist -srvtab Output
The output displays the key versions for service principals on the Control
Workstation.
3.7.3 kdestroy
The
kdestroy
command writes zeros to the user
′
s current ticket cache file and
then removes the file. As a result, all the user
′
s active authentication tickets are
deleted. For added security, you may wish to automatically destroy your tickets
when you log out.
3.7.4 kstash
The
kstash
command saves the system
′
s authentication database master key in
the master key cache file (/.k). The user is prompted to enter the master key to
verify the authenticity of the key and to authorize caching it.
Chapter 3. K e r b e r o s
81