.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.20) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .ie \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . nr % 0 . rr F .\} .el \{\ . de IX .. .\} .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "KDB 8" .TH KDB 8 "2021-12-09" "OpenAFS" "AFS Command Reference" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" kdb \- Displays log or privileged actions performed by the Authentication Server .SH "SYNOPSIS" .IX Header "SYNOPSIS" \&\fBkdb\fR [\fB\-dbmfile\fR\ <\fIdbmfile\ to\ use\ (default\ /usr/afs/logs/AuthLog)\fR>] [\fB\-key\fR\ <\fIextract\ entries\ that\ match\ specified\ key\fR>] [\fB\-long\fR] [\fB\-numeric\fR] [\fB\-help\fR] .SH "DESCRIPTION" .IX Header "DESCRIPTION" The \fBkdb\fR command displays the contents of the \fIAuthLog.dir\fR and \&\fIAuthLog.pag\fR files associated with the \fIAuthLog\fR file that resides on the local disk, by default in the \fI/usr/afs/logs\fR directory. The files must exist in that directory, which normally implies that the Authentication Server is running on the machine. The files contain information on privileged actions performed by the obsolete Authentication Server. .SH "CAUTIONS" .IX Header "CAUTIONS" The \fBkdb\fR command is only used to read the log files from the obsolete Authentication Server, which should no longer be used. It is provided for sites that have not yet migrated to a Kerberos version 5 \s-1KDC\s0. The Authentication Server and supporting commands, including \fBkdb\fR, will be removed in a future version of OpenAFS. .PP It is possible that on some operating systems that \s-1AFS\s0 otherwise supports, the Authentication Server cannot create the \fI/usr/afs/logs/AuthLog.dir\fR and \fI/usr/afs/logs/AuthLog.pag\fR files, making this command inoperative. .SH "OPTIONS" .IX Header "OPTIONS" .IP "\fB\-dbmfile\fR <\fIdbmfile to use\fR>" 4 .IX Item "-dbmfile " Specifies the pathname of the file to display. Provide either a complete pathname, a pathname relative to the \fI/usr/afs/logs\fR directory, or a filename only, in which case the file must reside in the \fI/usr/afs/logs\fR directory. Omit this argument to display information from the \&\fIAuthLog.dir\fR and \fIAuthLog.pag\fR files in the \fI/usr/afs/logs\fR directory. .IP "\fB\-key\fR <\fIextract entries that match specified key\fR>" 4 .IX Item "-key " Specifies each entry to be displayed from the indicated file. .IP "\fB\-long\fR" 4 .IX Item "-long" When printing all entries, print out detailed information for each entry. .IP "\fB\-numeric\fR" 4 .IX Item "-numeric" Do not resolve \s-1IP\s0 addresses to hostnames, and instead print out numeric \s-1IP\s0 addresses. .IP "\fB\-help\fR" 4 .IX Item "-help" Prints the online help for this command. All other valid options are ignored. .SH "OUTPUT" .IX Header "OUTPUT" The first line of output indicates the location of the files from which the subsequent information is derived: .PP .Vb 1 \& Printing all entries found in .Ve .PP Each entry then includes the following two fields, separated by a colon: .IP "user/server" 4 .IX Item "user/server" Identifies the user requesting the corresponding service and the server that performed that service. In cases where no user is directly involved, only the server appears; in cases where no server is directly involved, only the user appears. .IP "service" 4 .IX Item "service" Identifies one of the following actions or services performed by the user or server process. .RS 4 .IP "\(bu" 4 \&\f(CW\*(C`auth\*(C'\fR: Obtained a ticket-granting ticket. .IP "\(bu" 4 \&\f(CW\*(C`chp\*(C'\fR: Changed a user password. .IP "\(bu" 4 \&\f(CW\*(C`cruser\*(C'\fR: Created a user entry in the Authentication Database. .IP "\(bu" 4 \&\f(CW\*(C`delu\*(C'\fR: Deleted a user entry from the Authentication Database. .IP "\(bu" 4 \&\f(CW\*(C`gtck\*(C'\fR: Obtained a ticket other than a ticket-granting ticket. .IP "\(bu" 4 \&\f(CW\*(C`setf\*(C'\fR: Set fields in an Authentication Database entry. .IP "\(bu" 4 \&\f(CW\*(C`unlok\*(C'\fR: Unlocked an Authentication Database entry. .RE .RS 4 .RE .PP The final line of output sums the number of entries. .SH "EXAMPLES" .IX Header "EXAMPLES" The following example shows the output of the \fBkdb\fR command in the Example Corporation cell (\f(CW\*(C`example.com\*(C'\fR): .PP .Vb 7 \& % kdb \& Printing all entries found in /usr/afs/logs/AuthLog \& admin,krbtgt.EXAMPLE.COM:auth \& admin,afs:gtck \& admin:cruser \& admin:delu \& 4 entries were found .Ve .SH "PRIVILEGE REQUIRED" .IX Header "PRIVILEGE REQUIRED" The issuer must be logged in as the local superuser \f(CW\*(C`root\*(C'\fR. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fIAuthLog.dir\fR\|(5), \&\fIbos_getlog\fR\|(8), \&\fIkaserver\fR\|(8) .SH "COPYRIGHT" .IX Header "COPYRIGHT" \&\s-1IBM\s0 Corporation 2000. All Rights Reserved. .PP This documentation is covered by the \s-1IBM\s0 Public License Version 1.0. It was converted from \s-1HTML\s0 to \s-1POD\s0 by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.