Red Hat Training

A Red Hat training course is available for Red Hat Enterprise Linux

29.4. Removing Keytabs

Removing a keytab and creating a new keytab is necessary for example when you unenroll and re-enroll a host or when you experience Kerberos connection errors.
To remove all keytabs on a host, use the ipa-rmkeytab utility, and pass these options:
  • --realm (-r) to specify the Kerberos realm
  • --keytab (-k) to specify the path to the keytab file 
# ipa-rmkeytab --realm EXAMPLE.COM --keytab /etc/krb5.keytab
To remove a keytab for a specific service, use the --principal (-p) option to specify the service principal: 
# ipa-rmkeytab --principal ldap/client.example.com --keytab /etc/krb5.keytab