MAKE_KEYPAIR
Section: Maintenance Commands (8)
Index
Return to Main Contents
BSD mandoc
NAME
make_keypair
- generate Kerberos host key pair
SYNOPSIS
make_keypair
hostname
[hostname ...
]
DESCRIPTION
The
make_keypair
command
is used to create pairs of
DES
keys for
each
hostname
The keys are used by priviledged programs such as
register(1)
to make remote updates to the Kerberos database without
having to have first acquired a Kerberos ticket granting ticket
(TGT
)
The keys created by
make_keypair
are placed (by hand) in the filesystems of the
kerberos server in
/etc/kerberosIV/register_keys
and in the root directory on the clients.
For example, the file
/.update.key128.32.130.3
would
contain a copy of the key on the client with
IP address 128.32.130.3.
These keys provide a shared secret which may be used to establish
a secure channel between the client hosts and the Kerberos server.
FILES
- /.update.keyxx.xx.xx.xx
-
shared
DES
key with server
- /etc/kerberosIV/register_keys
-
server's key storage directory
SEE ALSO
register(1),
registerd(8),
kerberos(1)
HISTORY
The
make_keypair
command
Ud
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- FILES
-
- SEE ALSO
-
- HISTORY
-
This document was created by
man2html,
using the manual pages.
Time: 06:39:34 GMT, May 19, 2025