MAKE_KEYPAIR(8) BSD System Manager's Manual MAKE_KEYPAIR(8) NNAAMMEE mmaakkee__kkeeyyppaaiirr - generate Kerberos host key pair SSYYNNOOPPSSIISS mmaakkee__kkeeyyppaaiirr _h_o_s_t_n_a_m_e [_h_o_s_t_n_a_m_e _._._.] DDEESSCCRRIIPPTTIIOONN The mmaakkee__kkeeyyppaaiirr command is used to create pairs of DES keys for each _h_o_s_t_n_a_m_e. The keys are used by privileged programs such as register(1) to make remote updates to the Kerberos database without having to have first acquired a Kerberos ticket granting ticket (TGT). The keys created by mmaakkee__kkeeyyppaaiirr are placed (by hand) in the filesystems of the kerberos server in _/_e_t_c_/_k_e_r_b_e_r_o_s_I_V_/_r_e_g_i_s_t_e_r___k_e_y_s, and in the root directory of the clients. For example, the file _/_._u_p_d_a_t_e_._k_e_y_1_2_8_._3_2_._1_3_0_._3 would contain a copy of the key of the client with IP address 128.32.130.3. These keys provide a shared secret which may be used to establish a secure channel between the client hosts and the Kerberos server. FFIILLEESS /.update.keyxx.xx.xx.xx shared DES key with server /etc/kerberosIV/register_keys server's key storage directory SSEEEE AALLSSOO register(1), registerd(8), kerberos(1) HHIISSTTOORRYY The mmaakkee__kkeeyyppaaiirr utility first appeared in 4.4BSD. 4.4BSD December 11, 1993 1