A utility for removing principals from a keytab.

When we un-enroll a client we'll do a bit of cleanup including removing
any principals for the IPA realm from /etc/krb5.keytab.

This removes principals in 2 ways:
- By principal, only entries matching the full principal are removed
- By realm. Any principal for that realm is removed

This does not change the KDC at all, just removes entries from a file
on the client machine.

ipa-client/Makefile.am

@@ -22,6 +22,7 @@ INCLUDES =							\
 
 sbin_PROGRAMS =			\
 	ipa-getkeytab		\
+	ipa-rmkeytab		\
 	ipa-join		\
 	$(NULL)
 
@@ -37,6 +38,15 @@ ipa_getkeytab_LDADD = 		\
 	$(POPT_LIBS)		\
 	$(NULL)
 
+ipa_rmkeytab_SOURCES =		\
+	ipa-rmkeytab.c		\
+	$(NULL)
+
+ipa_rmkeytab_LDADD = 		\
+	$(KRB5_LIBS)		\
+	$(POPT_LIBS)		\
+	$(NULL)
+
 ipa_join_SOURCES =		\
 	config.c		\
 	ipa-join.c		\