Kerberos commands
This table lists the specific authorities required for the Kerberos commands.
| Command | Referenced object | Object type | Authority needed for object |
|---|---|---|---|
| ADDKRBKTE | Each directory in the path name preceding the target key table file to be open. | *DIR | *X |
| Parent directory of the target keytab file when add is specified, if the file does not already exist. | *DIR | *WX | |
| Keytab file when list is specified. | *STMF | *R | |
| Target keytab file when add or delete is specified. | *STMF | *RW | |
| Each directory in the path to the configuration files. | *DIR | *X | |
| Configuration files | *STMF | *R | |
| ADDKRBTKT | Each directory in the path name preceding the key table file | *DIR | *X |
| Key table file | *STMF | *R | |
| Each directory in the path name preceding the credentials cache file | *DIR | *X | |
| Credential cache file | *STMF | *RW | |
| Parent directory of the cache file to be used, if specified by the KRB5CCNAME environment variable, and the file is being created | *DIR | *WX | |
| Each directory in the path name to the configuration files | *DIR | *X | |
| Configuration files | *STMF | *R | |
| CHGKRBPWD | |||
| DLTKRBCCF | Each directory in the path name preceding the credentials cache file, if the credentials cache file does not reside in the default directory. | *DIR | *X |
| Parent directory of the credentials cache file, if the credentials cache file does not reside in the default directory. | *DIR | *WX | |
| Credentials cache file, if the credentials cache file does not reside in the default directory. | *STMF | *RW, *OBJEXIST | |
| Each directory in the path name to the configuration files, if the credentials cache file does not reside in the default directory. | *DIR | *X | |
| Configuration files, if the credentials cache file does not reside in the default directory. | *STMF | *R | |
| DLTKRBCCF | All directories in the path name, if the credentials cache file resides in the default directory. | *DIR | *X |
| Credentials cache file, if the credentials cache file resides in the default directory. | *STMF | *RW | |
| Each directory in the path to the configuration files, if the credentials cache file resides in the default directory. | *DIR | *X | |
| Configuration files, if the credentials cache file resides in the default directory. | *STMF | *R | |
| DSPKRBCCF | Each directory in the path name preceding the key table file | *DIR | *X |
| Key table file | *STMF | *R | |
| Each directory in the path name preceding the credentials cache file | *DIR | *X | |
| Credential cache file | *STMF | *RW | |
| DSPKRBKTE | Each directory in the path name preceding the target key table file to be open. | *DIR | *X |
| Parent directory of the target keytab file when add is specified, if the file does not already exist. | *DIR | *WX | |
| Keytab file when list is specified. | *STMF | *R | |
| Target keytab file when add or delete is specified. | *STMF | *RW | |
| Each directory in the path to the configuration files. | *DIR | *X | |
| Configuration files | *STMF | *R | |
| RMVKRBKTE | Each directory in the path name preceding the target key table file to be open. | *DIR | *X |
| Parent directory of the target keytab file when add is specified, if the file does not already exist. | *DIR | *WX | |
| Keytab file when list is specified. | *STMF | *R | |
| Target keytab file when add or delete is specified. | *STMF | *RW | |
| Each directory in the path to the configuration files. | *DIR | *X | |
| Configuration files | *STMF | *R |