BSD 4_4_Lite2 development
[unix-history] / usr / share / man / cat8 / make_keypair.0
MAKE_KEYPAIR(8) BSD System Manager's Manual MAKE_KEYPAIR(8)
N\bNA\bAM\bME\bE
m\bma\bak\bke\be_\b_k\bke\bey\byp\bpa\bai\bir\br - generate Kerberos host key pair
S\bSY\bYN\bNO\bOP\bPS\bSI\bIS\bS
m\bma\bak\bke\be_\b_k\bke\bey\byp\bpa\bai\bir\br _\bh_\bo_\bs_\bt_\bn_\ba_\bm_\be [_\bh_\bo_\bs_\bt_\bn_\ba_\bm_\be _\b._\b._\b.]
D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
The m\bma\bak\bke\be_\b_k\bke\bey\byp\bpa\bai\bir\br command is used to create pairs of DES keys for each
_\bh_\bo_\bs_\bt_\bn_\ba_\bm_\be. The keys are used by privileged programs such as register(1) to
make remote updates to the Kerberos database without having to have first
acquired a Kerberos ticket granting ticket (TGT). The keys created by
m\bma\bak\bke\be_\b_k\bke\bey\byp\bpa\bai\bir\br are placed (by hand) in the filesystems of the kerberos
server in _\b/_\be_\bt_\bc_\b/_\bk_\be_\br_\bb_\be_\br_\bo_\bs_\bI_\bV_\b/_\br_\be_\bg_\bi_\bs_\bt_\be_\br_\b__\bk_\be_\by_\bs, and in the root directory of the
clients. For example, the file _\b/_\b._\bu_\bp_\bd_\ba_\bt_\be_\b._\bk_\be_\by_\b1_\b2_\b8_\b._\b3_\b2_\b._\b1_\b3_\b0_\b._\b3 would contain a
copy of the key of the client with IP address 128.32.130.3. These keys
provide a shared secret which may be used to establish a secure channel
between the client hosts and the Kerberos server.
F\bFI\bIL\bLE\bES\bS
/.update.keyxx.xx.xx.xx shared DES key with server
/etc/kerberosIV/register_keys server's key storage directory
S\bSE\bEE\bE A\bAL\bLS\bSO\bO
register(1), registerd(8), kerberos(1)
H\bHI\bIS\bST\bTO\bOR\bRY\bY
The m\bma\bak\bke\be_\b_k\bke\bey\byp\bpa\bai\bir\br utility first appeared in 4.4BSD.
4.4BSD December 11, 1993 1