[This seems to be confusing keys with the keytabs in which they live.] What's the problem with something like this? kadmin -l ext -k ... '*/fred.example.com' If you do it on the host, leave off the -l and -k and just overwrite the existing keytab.