=head1 NAME
kdb - Displays log or privileged actions performed by the Authentication Server
=head1 SYNOPSIS
=for html
B S<<< [B<-dbmfile> >] >>>
S<<< [B<-key> >] >>>
[B<-long>] [B<-numeric>] [B<-help>]
=for html
=head1 DESCRIPTION
The B command displays the contents of the F and
F files associated with the F file that resides on
the local disk, by default in the F directory. The files
must exist in that directory, which normally implies that the
Authentication Server is running on the machine. The files contain
information on privileged actions performed by the obsolete Authentication
Server.
=head1 CAUTIONS
The B command is only used to read the log files from the obsolete
Authentication Server, which should no longer be used. It is provided for
sites that have not yet migrated to a Kerberos version 5 KDC. The
Authentication Server and supporting commands, including B, will be
removed in a future version of OpenAFS.
It is possible that on some operating systems that AFS otherwise supports,
the Authentication Server cannot create the F
and F files, making this command inoperative.
=head1 OPTIONS
=over 4
=item B<-dbmfile> >
Specifies the pathname of the file to display. Provide either a complete
pathname, a pathname relative to the F directory, or a
filename only, in which case the file must reside in the F
directory. Omit this argument to display information from the
F and F files in the F directory.
=item B<-key> >
Specifies each entry to be displayed from the indicated file.
=item B<-long>
When printing all entries, print out detailed information for each entry.
=item B<-numeric>
Do not resolve IP addresses to hostnames, and instead print out numeric IP
addresses.
=item B<-help>
Prints the online help for this command. All other valid options are
ignored.
=back
=head1 OUTPUT
The first line of output indicates the location of the files from which
the subsequent information is derived:
Printing all entries found in
Each entry then includes the following two fields, separated by a colon:
=over 4
=item user/server
Identifies the user requesting the corresponding service and the server
that performed that service. In cases where no user is directly involved,
only the server appears; in cases where no server is directly involved,
only the user appears.
=item service
Identifies one of the following actions or services performed by the user
or server process.
=over 4
=item *
C: Obtained a ticket-granting ticket.
=item *
C: Changed a user password.
=item *
C: Created a user entry in the Authentication Database.
=item *
C: Deleted a user entry from the Authentication Database.
=item *
C: Obtained a ticket other than a ticket-granting ticket.
=item *
C: Set fields in an Authentication Database entry.
=item *
C: Unlocked an Authentication Database entry.
=back
=back
The final line of output sums the number of entries.
=head1 EXAMPLES
The following example shows the output of the B command in the Example
Corporation cell (C):
% kdb
Printing all entries found in /usr/afs/logs/AuthLog
admin,krbtgt.EXAMPLE.COM:auth
admin,afs:gtck
admin:cruser
admin:delu
4 entries were found
=head1 PRIVILEGE REQUIRED
The issuer must be logged in as the local superuser C.
=head1 SEE ALSO
L,
L,
L
=head1 COPYRIGHT
IBM Corporation 2000. All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was
converted from HTML to POD by software written by Chas Williams and Russ
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.