Removing Principals from Keytabs

To remove a principal from an existing keytab, use the kadmin ktremove command. The syntax is:

     ktremove [-k[eytab] keytab] [-q] principal [kvno | all | old]
     

The ktremove command takes the following switches:

-k[eytab] keytab

use keytab as the keytab file. Otherwise, ktremove will use the default keytab file (/etc/krb5.keytab).

-q

run in quiet mode. This causes ktremove to display less verbose information.

principal

the principal to remove from the keytab. (Required.)

kvno

remove all entries for the specified principal whose Key Version Numbers match kvno.

all

remove all entries for the specified principal

old

remove all entries for the specified principal except those with the highest kvno.

For example:

     kadmin: ktremove -k /usr/local/var/krb5kdc/kadmind.keytab kadmin/admin
     kadmin: Entry for principal kadmin/admin with kvno 3 removed
          from keytab WRFILE:/usr/local/var/krb5kdc/kadmind.keytab.
     kadmin: