Kerberos: The Definitive Guide

Name

modify — Modifying principal attributes

Synopsis

modify [--max-ticket-life=lifetime] [--max-renewable-life=lifetime]    [--attributes=attributes] [--expiration-time=time] [--pw-expiration-time=time]    [--kvno=kvno] [-policy policyname] principal-name

The modify command modifies selected attributes of the principal. It accepts most of the arguments that are accepted by add, and adds one: kvno. The optional kvno argument changes the key version number listed on the principal. You should never have to change the key version number manually, but it can come in handy in some unusual circumstances. For more information on the optional arguments accepted by modify, see the previous section on add.

The modify command requires that the administrator have modify permissions on the principal she is modifying.

Note that when modifying a principal’s attributes, the attributes given will replace any attributes already set on the principal.

Example

kadmin> modify --attributes=requires-pre-auth jgarman