3.1 Destroying the Kerberos Services

Destroy the Kerberos services (KDC, Administration server, and Password server).

  1. Stop the daemon (krb5kdc, kadmind, or kpasswdd)

  2. Destroy the service object as follows:

    kdb5_ldap_util [-D user_dn] [-H ldapuri] [-t trusted_cert] destroy_service [-f stashfilename] service_dn

    For example:

    kdb5_ldap_util -D cn=admin,o=mit destroy_service -f /opt/novell/kerberos/keyfile cn=kdc-service,o=mit
    

    IMPORTANT:If you destroy a Kerberos service without stopping the daemon, the service continues to serve the incoming requests because it has an active connection with the LDAP server.