[Freeipa-users] Strange klist output

Marco Pizzoli marco.pizzoli at gmail.com
Sat Feb 25 14:22:40 UTC 2012


On Sat, Feb 25, 2012 at 3:20 PM, Simo Sorce <simo at redhat.com> wrote:

> On Sat, 2012-02-25 at 13:53 +0100, Marco Pizzoli wrote:
> > Hi, as you know I'm working with FreeIPA 2.1.90.
> >
> > By following documentation I checked my tickets by issuing the klist
> > command but I'm obtaining an output slightly different than the one on
> > the doc.
> >
> > [root at freeipa01 ~]# klist -kt /etc/krb5.keytab
> > Keytab name: WRFILE:/etc/krb5.keytab
> > KVNO Timestamp         Principal
> > ---- -----------------
> > --------------------------------------------------------
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >    2 02/15/12 18:28:58
> > host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT
> >
> > I see 6 rows as duplicated. Is it normal? Please, could you explain
> > what is happening?
> >
>
> Use -e to see what enctypes are reported.
>

[root at freeipa01 ~]# klist -kt /etc/krb5.keytab -e
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Timestamp         Principal
---- -----------------
--------------------------------------------------------
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(aes256-cts-hmac-sha1-96)
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(aes128-cts-hmac-sha1-96)
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(des3-cbc-sha1)
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(arcfour-hmac)
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(des-hmac-sha1)
   2 02/15/12 18:28:58
host/freeipa01.unix.mydomain.it at UNIX.MYDOMAIN.IT(des-cbc-md5)

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120225/437518be/attachment.htm>


More information about the Freeipa-users mailing list