<html>

<head>

<title>keytab create</title></head>

<body  BGCOLOR="#ffffff">

<table border="0">

<td width="10">&nbsp;</td>

<td>

<a href="Comre388.htm"><img src="./prev.gif" border="0" alt="Previous" WIDTH="32" HEIGHT="32"></a><a href="Comre390.htm"><img src="./next.gif" border="0" alt="Next" WIDTH="32" HEIGHT="32"></a><p>

<h4>     keytab create<p>

</h4>Creates a key table.  The syntax is:<p>

<b>keytab create </b><i>keytab_name_list</i><b>  <br></b>{<b>-attribute </b><i>attribute_list</i><b> | </b><i>attribute value</i>}<b>  <br>keytab 

</b><i>residual_keytab_name</i><b> [-entry] [-noprivacy] [-local] 

</i></b><p>

<b></b><b>Options</b></b><p>

<b>-attribute </b><i>attribute_list</i><b> <br></b>Allows you to specify attributes by using an attribute list rather than using the <i>-attribute value </i>option.  The format of an 

attribute list is as follows: 

</i></b><p>

 	{{<i>attribute value</i>}&#133;{<i>attribute value</i>}}</i><p>

<i>-attribute value <br></i>As an alternative to using the <b>-attribute</b> option with an attribute list, you can change individual options by prepending a hyphen (-) to any attributes 

list in the <a href="Comre384.htm">Attributes</a> topic of this reference page. 

</i></b><p>

<b>-ktname</b> <i>residual_keytab_name</i> <br>Specifies the <b>keytab </b>object to create.  If you use this option, you must specify <i>keytab_name_list </i>as a string binding.  

See <a href="Comre382.htm">Arguments</a><b> </b>for more information about specifying a string binding for <i>keytab_name_list. 

</i></b><p>

<i></i><b>-local <br></b>Specifies that the <b>create</b> operation operates on local files only.</i></b><p>

<b>-noprivacy <br></b>Specifies that key tables are sent over the network unencrypted.</b><p>

<b>Description</b> <br>The <b>keytab create</b> operation creates a key table.  The argument is a list of names of key tables to be created.  The command takes an <b>-attribute</b> 

option to specify configuration information for <b>dced</b>.  The <b>-ktname</b> option identifies the specific key table to operate on, but only when the argument is a string binding 

representing a key table, not the fully qualified key table name.  Use the <b>data</b> attribute to specify the contents of the key tables named in the <i>keytab_name_list</i>.  The <b>data</b> 

attribute is a list of keys with associated principal names, key types, versions, and key values in the form 

</i></b><p>

<i>principal_name key_type version</i>{<i>key_value</i>}</i><p>

where :<p>

<i>principal_name</i> <br>Is the required name of the server principal for which the keytab is being created.</i><p>

<i>key_type <br></i>Is a required code that specifies whether the key is stored in plain text or in DES encrypted format:</i><p>

· 	<b>des </b>indicates DES encryption</b><p>

· 	<b>plain</b> indicates plain text</b><p>

<i>version</i> <br>Is the key's required version number.</i><p>

<i>key-value <br></i>If the key type is <b>plain,</b> <i>key value</i> is required.  If the key type is <b>des,</b> <i>key value</i> is optional; if one is not entered, a key value 

is randomly generated. 

</i></b><p>

This operation creates the key tables named in <i>keytab_name_list</i>
 and assigns all of them the values specified by the <b>data</b>
 attribute  The operation returns an empty string on success.</i>
</b>
<p>

<b>Privileges Required</b> <br>You must have <b>I </b>(<b>insert</b>) permission to the <b>keytab</b> object on the host.</b><p>

<b>Examples</b> <br>The following example creates two keys for user <b>vmr</b>and one key for <b>pwang</b> on host <b>medusa</b>.  One of <b>vmr's </b>keys is an automatically 

generated Data Encryption Standard (DES) key.  Both <b>vmr's </b>second key and <b>pwang's</b> key are manually entered keys. 

</b><p>

dcecp&gt; <b>keytab create </b>/<b>.:</b>/<b>hosts</b>/<b>medusa</b>/<b>config</b>/<b>keytab</b>/<b>radiology -attribute </b>\<b> </b> <br>&gt; {{{<b>storage 

</b>/<b>opt</b>/<b>dcelocal</b>/<b>keys</b>/<b>radiology</b>}<b> </b>{<b>data </b>{{<b>vmr des 2</b>}<b> </b>\ <br>&gt; {<b>vmr plain 3 </b><i>key2</i>}<b> </b>{<b>pwang 

des 2 </b><i>key3</i>}}}}<b>  <br></b>dcecp&gt; 

</i></b><p>

<h4><b></h4></b><p>

<b></b></b><p>

</td>

</table>

</body></html>

