Man pages › Compared with Linux and the BSDs

`k5srvutil(8)` on Solnix vs Linux and the BSDs

On Solnix, k5srvutil is the illumos tool at /usr/sbin/k5srvutil, in section 8. It lists and rotates keys in a Kerberos keytab, and its default keytab is /etc/krb5/krb5.keytab. Unlike FreeBSD's k5srvutil, the Solnix page documents no -e option for choosing key salts or encryption types.

The manual pages

Solnix: k5srvutil(8) from pkgs.solnix.illumos-world-man · illumos.org
FreeBSD: k5srvutil(1) 15.1-RELEASE

What Solnix runs

A default Solnix system runs the illumos k5srvutil at /usr/sbin/k5srvutil. No other variants are shipped. The page is published in pkgs.solnix.illumos-world-man.

Differences

Compared with	Topic	What differs
FreeBSD	`-e` keysalts missing	FreeBSD k5srvutil accepts `-e` keysalts to override the encryption types and key salts used by change. The Solnix synopsis and OPTIONS list only `-f`, `-i` and `-k`, so the Solnix page documents no way to pick them. Source: FreeBSD k5srvutil(1) SYNOPSIS, change; Solnix k5srvutil(8) SYNOPSIS, OPTIONS
FreeBSD	`-k` documented differently	Solnix lists `-k` in its synopsis and OPTIONS: it displays old and new keys with change. The FreeBSD synopsis omits `-k`, but the FreeBSD change text mentions it. The FreeBSD page is inconsistent here. Source: Solnix k5srvutil(8) SYNOPSIS, -k; FreeBSD k5srvutil(1) SYNOPSIS, change
FreeBSD	default keytab location	Solnix names `/etc/krb5/krb5.keytab` as the default keytab, used unless `-f` is given. The FreeBSD page says only that the default keytab is used and gives no path. Source: Solnix k5srvutil(8) DESCRIPTION, -f; FreeBSD k5srvutil(1) DESCRIPTION
FreeBSD	manual section and path	The Solnix page is in section 8 and gives the full path `/usr/sbin/k5srvutil.` The FreeBSD page is in section 1 and shows the bare command name. Run it as a privileged user on Solnix, since it edits the system keytab. Source: Solnix k5srvutil(8) SYNOPSIS; FreeBSD k5srvutil(1) SYNOPSIS
FreeBSD	`-i` scope for delold	Both pages say `-i` prompts before each change. For delold, Solnix says it asks whether the old keys of each principal should be removed. FreeBSD says it prompts for confirmation for each principal. The behaviour described is the same. Source: Solnix k5srvutil(8) delold, -i; FreeBSD k5srvutil(1) delold
FreeBSD	environment variables	The FreeBSD page has an ENVIRONMENT section that refers to kerberos for Kerberos environment variables. The Solnix page has no ENVIRONMENT section and says nothing about environment variables. Source: FreeBSD k5srvutil(1) ENVIRONMENT; Solnix k5srvutil(8) (no ENVIRONMENT section)
FreeBSD	old key retention advice	FreeBSD advises running delold after existing tickets expire, to prevent attacks against the old keys. The Solnix page says only to run it at some point after change. Both say change keeps old keys so existing tickets keep working. Source: FreeBSD k5srvutil(1) change, delold; Solnix k5srvutil(8) change, delold

Standards

POSIX: k5srvutil is not a POSIX.1-2024 utility.
Solnix: Interface Stability: Committed.
FreeBSD: The FreeBSD page has no STANDARDS section.

Writing portable scripts

Do not rely on -e being available: Solnix does not document it. Do not hard-code a keytab path. Pass -f explicitly, since the Solnix default is /etc/krb5/krb5.keytab and the FreeBSD page names no default.

Every difference here is taken from the manual pages linked above: Solnix's published page, Linux (man-pages and the GNU and util-linux manuals), FreeBSD, OpenBSD and NetBSD. Each row names its source. Where a manual is silent, this page is too. Compiled 2026-10-26. Found a mistake? Mail hackers@lists.solnix.io.