MAKE_KEYPAIR(8) BSD System Manager's Manual MAKE_KEYPAIR(8)NAMEmake_keypair — generate Kerberos host key pair
SYNOPSISmake_keypair hostname [hostname ...]
DESCRIPTION
The make_keypair command is used to create pairs of DES keys for each
hostname. The keys are used by privileged programs such as register(1)
to make remote updates to the Kerberos database without having to have
first acquired a Kerberos ticket granting ticket (TGT). The keys created
by make_keypair are placed (by hand) in the filesystems of the kerberos
server in /etc/kerberosIV/register_keys, and in the root directory of the
clients. For example, the file /.update.key128.32.130.3 would contain a
copy of the key of the client with IP address 128.32.130.3. These keys
provide a shared secret which may be used to establish a secure channel
between the client hosts and the Kerberos server.
FILES
/.update.keyxx.xx.xx.xx shared DES key with server
/etc/kerberosIV/register_keys server's key storage directory
SEE ALSOregister(1), registerd(8), kerberos(1)HISTORY
The make_keypair utility first appeared in 4.4BSD.
BSD December 11, 1993 BSD