ipa-getkeytab(1) on Linux
The text b8be2735192a, as Debian 10 (Buster) shipped it.
Get a keytab for a Kerberos principal
Flags it lists
-
--binddn -
--bindpw -
--cacert -
--ldapuri -
--mech -
--password -
--permitted-enctypes -
-D -
-H -
-P -
-Y -
-e -
-k -
-p -
-q -
-r -
-s -
-w