Options

-k keytab
Specifies the key table name. The default key table is used if this option is not specified.
-p password
Specifies the password. The user is prompted to enter the password if this option is not specified when adding an entry to the key table.

Note that the password provided for the keytab command must exactly match the password that was used to generate the key in the KDC. For example, this password is case sensitive. If your KDC uses a RACF database with mixed-case passwords disabled then this password needs to be entered in uppercase. If you are embedding spaces then they need to be escaped or the whole password needs to be quoted according to your shell rules.

-r
When specified on the keytab add, or merge options, entries whose principal name and version number are identical will be deleted from the target keytab file before the new entries for the given principal and version number are added.
-v version
Specifies the key version number. When adding a key, the next version number is assigned if this option is not specified. When deleting, listing or merging keytabs, all keys for the principal are deleted if this option is not specified. When the version number is specified, the principal name must also be specified.

in_keytab is the path of the keytab to be merged to the keytab file. It must be specified during a merge operation, and the file must exist.

The principal name is optional when merging, listing or checking a keytab. When the principal name is specified, only entries for that principal are operated on.